@mattab opened this issue on November 24th 2012

For example, the Page Overlay report does not work over SSL on the demo because the _SERVER[is not set but _SERVER'HTTP_X_FORWARDED_PROTO' is

@mattab commented on November 24th 2012

(In [7534]) Fixes #3572 Refs #2465 Overlay work on SSL on demo! NICE!

@robocoder commented on November 24th 2012

Probably doesn't matter here, but the reason I didn't include X-Forwarded-Proto is because it's non-standard and can be spoofed. Other variations are X-Forwarded-Ssl and X-Forwarded-Scheme. Hence "assume_secure_protocol".

This issue was closed on November 24th 2012
Powered by GitHub Issue Mirror