Skip to content

Commit

Permalink
More fixing
Browse files Browse the repository at this point in the history
  • Loading branch information
Seldaek committed Jan 21, 2014
1 parent cc50f18 commit ad94d53
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion config/prod.php
Expand Up @@ -7,7 +7,7 @@
// force ssl
$app->before(function (Request $request) {
// skip SSL & non-GET/HEAD requests
if ($request->isSecure() || !$request->isMethodSafe()) {
if (strtolower($request->headers->get('X_FORWARDED_PROTO')) == 'https' || !$request->isMethodSafe()) {
return;
}

Expand Down

1 comment on commit ad94d53

@stof
Copy link
Contributor

@stof stof commented on ad94d53 Jan 23, 2014

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IMO, you should keep using $request->isSecure() and fix the support of trusted proxies

Please sign in to comment.