From d1922ab361b5e104b7c14b28c76d1c47651635ef Mon Sep 17 00:00:00 2001
From: =?utf8?q?Roland=20H=C3=A4der?= <roland@mxchange.org>
Date: Tue, 19 Jul 2016 15:59:31 +0200
Subject: [PATCH] also prevent it in .htacces. You may want to add this to one
 of your files in /etc/apache2/ (e.g. create a file called
 /etc/apache2/conf.d/httpoxy), too to protect all other apps as well.

---
 .htaccess | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.htaccess b/.htaccess
index 5449e0a0f9..0d28312700 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,6 +1,11 @@
 Options -Indexes
 DirectoryIndex index.php
 
+# HTTPoxy mitigation
+<IfModule mod_headers.c>
+	RequestHeader unset Proxy
+</IfModule>
+
 <IfModule mod_rewrite.c>
 	RewriteEngine On
 	RewriteRule ^cms/(.*)/wht/(.*)$                       modules.php?module=$1&what=$2         [L]
-- 
2.39.5