fix: set securityTrustProxy to false by default

9 months ago · b1e1759f25
parent 99e74e8eb2
commit b1e1759f25
2 changed files with 2 additions and 2 deletions
--- a/client/components/admin/admin-security.vue
+++ b/client/components/admin/admin-security.vue
@ -265,7 +265,7 @@ export default {
        securityOpenRedirect: true,
        securityIframe: true,
        securityReferrerPolicy: true,
-        securityTrustProxy: true,
+        securityTrustProxy: false,
        securitySRI: true,
        securityHSTS: false,
        securityHSTSDuration: 0,
--- a/server/app/data.yml
+++ b/server/app/data.yml
@ -85,7 +85,7 @@ defaults:
      securityOpenRedirect: true
      securityIframe: true
      securityReferrerPolicy: true
-      securityTrustProxy: true
+      securityTrustProxy: false
      securitySRI: true
      securityHSTS: false
      securityHSTSDuration: 300