1
84%
master: 83%

Ran 14 Jul 2026 04:06AM UTC

Files 21

Run time 0s

Badge

Embed ▾

Committed 14 Jul 2026 04:06AM UTC coverage: 84.284% (+0.1%) from 84.141%

Job # 29305138811.1

Build Type

push

github

Committed by

Commit Message

HttpExtension: default to trusting X-Forwarded-For only (BC break!)

Changes the configured default of `proxyHeaders` from "both" to "xForwarded",
so an application behind a proxy no longer trusts a client-supplied "Forwarded"
header by default (the common proxy sets X-Forwarded-For). The RequestFactory
PHP default is intentionally left at "both" for BC; this hardens only the
framework configuration.

BC: deployments whose proxy uses the "Forwarded" header must now set
`proxyHeaders: forwarded` (or `both`).

Coverage Stats

1094 of 1298 relevant lines covered (84.28%)

0.84 hits per line

nette / http / 29305138811 / 1
84%
master: 83%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 29305138811.1

nette / http / 29305138811 / 1 84% master: 83%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 29305138811.1

nette / http / 29305138811 / 1
84%
master: 83%

README BADGES
x