[Koha-bugs] [Bug 24538] New: REMOTE_USER set to undef if koha_trusted_proxies contains invalid value
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Thu Jan 30 05:12:28 CET 2020
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24538
Bug ID: 24538
Summary: REMOTE_USER set to undef if koha_trusted_proxies
contains invalid value
Change sponsored?: ---
Product: Koha
Version: master
Hardware: All
OS: All
Status: NEW
Severity: minor
Priority: P5 - low
Component: Architecture, internals, and plumbing
Assignee: koha-bugs at lists.koha-community.org
Reporter: dcook at prosentient.com.au
QA Contact: testopia at bugs.koha-community.org
If koha_trusted_proxies contains an invalid or unparseable value, say due to a
typo, like "1.1.1.", it'll treat it as a 0.0.0.0/0 mask and match against
everything.
In my tests, this leads to REMOTE_USER being set to undef.
(On the plus side, at least a 0.0.0.0/0 mask leads to zero privileges rather
than all privileges.)
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
More information about the Koha-bugs
mailing list