• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

nette / http
84%
master: 83%

Build:
Build:
LAST BUILD BRANCH: v3.3
DEFAULT BRANCH: master
Repo Added 25 Jan 2021 12:42AM UTC
Files 19
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH v3.4
branch: v3.4
CHANGE BRANCH
x
Reset
  • v3.4
  • master
  • v3.0
  • v3.0.6
  • v3.0.7
  • v3.1
  • v3.1.1
  • v3.1.2
  • v3.1.3
  • v3.1.4
  • v3.1.5
  • v3.1.6
  • v3.1.7
  • v3.1.8
  • v3.2
  • v3.2.0
  • v3.2.0-RC
  • v3.2.1
  • v3.2.2
  • v3.2.3
  • v3.2.4
  • v3.3
  • v3.3.0
  • v3.3.0-RC
  • v3.3.1
  • v3.3.2
  • v3.3.3
  • v3.3.4
  • v3.4.0

14 Jul 2026 04:06AM UTC coverage: 84.284% (+0.1%) from 84.141%
29305138811

push

github

dg
HttpExtension: default to trusting X-Forwarded-For only (BC break!)

Changes the configured default of `proxyHeaders` from "both" to "xForwarded",
so an application behind a proxy no longer trusts a client-supplied "Forwarded"
header by default (the common proxy sets X-Forwarded-For). The RequestFactory
PHP default is intentionally left at "both" for BC; this hardens only the
framework configuration.

BC: deployments whose proxy uses the "Forwarded" header must now set
`proxyHeaders: forwarded` (or `both`).

1 of 1 new or added line in 1 file covered. (100.0%)

25 existing lines in 2 files now uncovered.

1094 of 1298 relevant lines covered (84.28%)

0.84 hits per line

Relevant lines Covered
Build:
Build:
1298 RELEVANT LINES 1094 COVERED LINES
0.84 HITS PER LINE
Source Files on v3.4
  • Tree
  • List 21
  • Changed 2
  • Source Changed 0
  • Coverage Changed 2
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
29305138811 v3.4 HttpExtension: default to trusting X-Forwarded-For only (BC break!) Changes the configured default of `proxyHeaders` from "both" to "xForwarded", so an application behind a proxy no longer trusts a client-supplied "Forwarded" header by default (t... push 14 Jul 2026 04:06AM UTC dg github
84.28
27921299958 v3.4 added CLAUDE.md push 21 Jun 2026 11:44PM UTC dg github
84.14
27451878080 v3.4 added CLAUDE.md push 13 Jun 2026 01:05AM UTC dg github
84.14
27451017397 v3.4 blog push 13 Jun 2026 12:33AM UTC dg github
84.07
27449677434 v3.4 added CLAUDE.md push 12 Jun 2026 11:50PM UTC dg github
84.17
27016425563 v3.4 added CLAUDE.md push 05 Jun 2026 01:02PM UTC dg github
84.07
26866543098 v3.4 added SameSite enum; setCookie() and Session accept it, IResponse::SameSite* constants deprecated push 03 Jun 2026 05:55AM UTC dg github
84.07
26866033208 v3.4 Request::isSameSite() uses isFrom() and is deprecated; strict cookie sent only without Sec-Fetch-Site push 03 Jun 2026 05:41AM UTC dg github
84.06
26792206728 v3.4 Response: setCookie() supports the Partitioned (CHIPS) attribute Adds a $partitioned argument to setCookie(). When enabled it appends the Partitioned attribute and forces Secure, which the browser requires for a partitioned cookie. Like $sameSite... push 02 Jun 2026 01:14AM UTC dg github
83.84
26791854406 v3.4 Response: setCookie() supports the Partitioned (CHIPS) attribute Adds a $partitioned argument to setCookie(). When enabled it appends the Partitioned attribute and forces Secure, which the browser requires for a partitioned cookie. Like $sameSite... push 02 Jun 2026 01:03AM UTC dg github
83.8
See All Builds (389)
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE TRIAL · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc