1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-12-20 12:30:56 +01:00
phorge-phorge/src/aphront/site
epriestley 66366137ff Don't apply security.require-https to intracluster requests
Summary:
Ref T10784. Currently, if you terminate SSL at a load balancer (very common) and use HTTP beyond that, you have to fiddle with this setting in your premable or a `SiteConfig`.

On the balance I think this makes stuff much harder to configure without any real security benefit, so don't apply this option to intracluster requests.

Also document a lot of stuff.

Test Plan: Poked around locally but this is hard to test outside of a production cluster, I'll vet it more thoroughly on `secure`.

Reviewers: chad

Reviewed By: chad

Maniphest Tasks: T10784

Differential Revision: https://secure.phabricator.com/D15696
2016-04-13 12:51:41 -07:00
..
AphrontRoutingMap.php Push construction of routing maps into Sites 2015-08-31 04:01:01 -07:00
AphrontRoutingResult.php Push construction of routing maps into Sites 2015-08-31 04:01:01 -07:00
AphrontSite.php Push construction of routing maps into Sites 2015-08-31 04:01:01 -07:00
PhabricatorPlatformSite.php Push construction of routing maps into Sites 2015-08-31 04:01:01 -07:00
PhabricatorResourceSite.php Put back "PhabricatorResourceSite" 2015-12-11 08:22:16 -08:00
PhabricatorShortSite.php Allow a domain other than the install domain to serve as a short Phurl domain 2015-11-09 11:34:20 -08:00
PhabricatorSite.php Don't apply security.require-https to intracluster requests 2016-04-13 12:51:41 -07:00