Mitigate https://httpoxy.org/ vulnerabilities in nginx.conf

See: https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/#Defeating-the-Attack-using-NGINX-and-NGINX-Plus
pimcore · Nov 12, 2021 · f15d022 · f15d022
1 parent 527a3be
commit f15d022
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.docker/nginx.conf b/.docker/nginx.conf
@@ -7,7 +7,6 @@ upstream php-pimcore10 {
     server php-fpm:9000;
 }
 
-
 upstream php-pimcore10-debug {
     server php-fpm-debug:9000;
 }
@@ -131,6 +130,9 @@ server {
         fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
         fastcgi_param DOCUMENT_ROOT $realpath_root;
 
+        # Mitigate https://httpoxy.org/ vulnerabilities
+        fastcgi_param HTTP_PROXY "";
+
         # If Xdebug session is requested, pass it to the Xdebug enabled container
         if ($http_cookie ~* "XDEBUG_SESSION") {
             fastcgi_pass php-pimcore10-debug;