Trust reverse proxy headers

This commit is contained in:
2026-08-04 17:34:57 +02:00
parent 75d04c4098
commit 20fb2d29e2
+2
View File
@@ -14,6 +14,8 @@ return Application::configure(basePath: dirname(__DIR__))
health: '/up', health: '/up',
) )
->withMiddleware(function (Middleware $middleware): void { ->withMiddleware(function (Middleware $middleware): void {
$middleware->trustProxies(at: '*');
$middleware->validateCsrfTokens(except: [ $middleware->validateCsrfTokens(except: [
'hook/*', 'hook/*',
]); ]);