also prevent it in .htacces. You may want to add this to one of your files in /etc...
authorRoland Haeder <rhaeder@cho-time.de>
Tue, 19 Jul 2016 13:59:31 +0000 (15:59 +0200)
committerRoland Haeder <rhaeder@cho-time.de>
Tue, 19 Jul 2016 13:59:31 +0000 (15:59 +0200)
.htaccess

index 5449e0a0f9ad3a92def32f93ac57c424bfc49448..0d28312700bd5846aadbc2f86280b92d95234318 100644 (file)
--- a/.htaccess
+++ b/.htaccess
@@ -1,6 +1,11 @@
 Options -Indexes
 DirectoryIndex index.php
 
+# HTTPoxy mitigation
+<IfModule mod_headers.c>
+       RequestHeader unset Proxy
+</IfModule>
+
 <IfModule mod_rewrite.c>
        RewriteEngine On
        RewriteRule ^cms/(.*)/wht/(.*)$                       modules.php?module=$1&what=$2         [L]