also force TLS when requiring user authentication in WebUI

[people/pmueller/ipfire-2.x.git] / config / httpd / global.conf

diff --git a/config/httpd/global.conf b/config/httpd/global.conf
index 3fbd5e2946d9b36a7d225510e79715b9095a73b5..6cc69b55eaab1b4223c0bb26870be73eb2f6ee40 100644 (file)
--- a/config/httpd/global.conf
+++ b/config/httpd/global.conf
@@ -8,3 +8,6 @@ Include /etc/httpd/conf/hostname.conf
 HostnameLookups off
 AddHandler cgi-script .cgi
 EnableSendfile Off
+
+# Always unset HTTP_PROXY variable, https://httpoxy.org
+RequestHeader unset Proxy early