Page MenuHomePhabricator

D16318.diff
No OneTemporary

D16318.diff

diff --git a/support/PhabricatorStartup.php b/support/PhabricatorStartup.php
--- a/support/PhabricatorStartup.php
+++ b/support/PhabricatorStartup.php
@@ -374,7 +374,7 @@
$http_error = 500);
error_log($log_message);
- echo $message;
+ echo $message."\n";
exit(1);
}
@@ -529,6 +529,13 @@
"Downgrade to version 3.1.13.");
}
}
+
+ if (isset($_SERVER['HTTP_PROXY'])) {
+ self::didFatal(
+ 'This HTTP request included a "Proxy:" header, poisoning the '.
+ 'environment (CVE-2016-5385 / httpoxy). Declining to process this '.
+ 'request. For details, see: https://phurl.io/u/httpoxy');
+ }
}

File Metadata

Mime Type
text/plain
Expires
Thu, Dec 19, 6:34 AM (15 h, 1 m)
Storage Engine
blob
Storage Format
Encrypted (AES-256-CBC)
Storage Handle
6906485
Default Alt Text
D16318.diff (679 B)

Event Timeline