Improve the proxy configuration per fideloper/TrustedProxy#115 (comment)

phoenix933 · Jun 24, 2020 · 186df87 · 186df87
1 parent 502b2ff
commit 186df87
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/BrefServiceProvider.php b/src/BrefServiceProvider.php
@@ -48,7 +48,8 @@ public function register(): void
         Config::set('view.compiled', '/tmp/storage/framework/views');
 
         // Allow all proxies because AWS Lambda runs behind API Gateway
-        Config::set('trustedproxy.proxies', '*');
+        // See https://github.com/fideloper/TrustedProxy/issues/115#issuecomment-503596621
+        Config::set('trustedproxy.proxies', ['0.0.0.0/0', '2000:0:0:0:0:0:0:0/3']);
 
         // Sessions cannot be stored to files, so we use cookies by default instead
         $sessionDriver = Config::get('session.driver');