3.3.15 added host validation which checks ports now, so it's no longer as simple as hiding the Referer and Origin headers.

Ming Tang 2017-08-11 12:06:46 -04:00
parent 31021ca25a
commit 8e1e9d7fcc

@ -1,9 +1,17 @@
If you're using NGINX as a reverse proxy for Web UI, as of version 3.3.14 (3.3.13 will break your setup), you'll need to add this to your `location /`
If you're using NGINX as a reverse proxy for Web UI, as of version 3.3.15, assuming your reverse proxy is local, your `location /` should look similar to the following:
```
location / {
...
proxy_pass http://127.0.0.1:<port>/;
...
proxy_set_header X-Forwarded-Host 127.0.0.1:<port>;
...
proxy_hide_header Referer;
proxy_hide_header Origin;
proxy_set_header Referer '';
proxy_set_header Origin '';
...
}
```