From 6cccb46f2b2839daee13c5d12e86a7987a22e6cd Mon Sep 17 00:00:00 2001 From: Markus Heiser Date: Sun, 10 Aug 2025 13:05:40 +0200 Subject: [fix] replace X-Scheme by X-Forwarded-Proto header (#5107) The HTTP X-Forwarded-Proto (XFP) request header is a *de-facto* standard header for identifying the protocol (HTTP or HTTPS) that a client used to connect to a proxy or load balancer.[1] The ``X-Scheme`` header was added 10 years ago, why ``X-Scheme`` was used back then and not ``X-Forwarded-Proto``, nobody knows today / possibly because ``X-Forwarded-Proto`` wasn't a *de-facto* standard back then. [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Forwarded-Proto [2] https://github.com/searx/searx/commit/6ef7c3276 --- utils/templates/etc/httpd/sites-available/searxng.conf | 4 ++-- utils/templates/etc/httpd/sites-available/searxng.conf:socket | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) (limited to 'utils/templates/etc/httpd/sites-available') diff --git a/utils/templates/etc/httpd/sites-available/searxng.conf b/utils/templates/etc/httpd/sites-available/searxng.conf index 004066200..46c2c1dd1 100644 --- a/utils/templates/etc/httpd/sites-available/searxng.conf +++ b/utils/templates/etc/httpd/sites-available/searxng.conf @@ -24,10 +24,10 @@ LoadModule proxy_http_module ${APACHE_MODULES}/mod_proxy_http.so ProxyPass http://${SEARXNG_INTERNAL_HTTP} # see flaskfix.py - RequestHeader set X-Scheme %{REQUEST_SCHEME}s + RequestHeader set X-Forwarded-Proto %{REQUEST_SCHEME}s RequestHeader set X-Script-Name ${SEARXNG_URL_PATH} - # see limiter.py + # see botdetection/trusted_proxies.py RequestHeader set X-Real-IP %{REMOTE_ADDR}s RequestHeader append X-Forwarded-For %{REMOTE_ADDR}s diff --git a/utils/templates/etc/httpd/sites-available/searxng.conf:socket b/utils/templates/etc/httpd/sites-available/searxng.conf:socket index 81bd7e4df..f63ab1a59 100644 --- a/utils/templates/etc/httpd/sites-available/searxng.conf:socket +++ b/utils/templates/etc/httpd/sites-available/searxng.conf:socket @@ -24,10 +24,10 @@ LoadModule proxy_uwsgi_module ${APACHE_MODULES}/mod_proxy_uwsgi.so ProxyPass unix:${SEARXNG_UWSGI_SOCKET}|uwsgi://uwsgi-uds-searxng/ # see flaskfix.py - RequestHeader set X-Scheme %{REQUEST_SCHEME}s + RequestHeader set X-Forwarded-Proto %{REQUEST_SCHEME}s RequestHeader set X-Script-Name ${SEARXNG_URL_PATH} - # see limiter.py + # see botdetection/trusted_proxies.py RequestHeader set X-Real-IP %{REMOTE_ADDR}s RequestHeader append X-Forwarded-For %{REMOTE_ADDR}s -- cgit v1.2.3