diff --git a/.htaccess b/.htaccess index 95b6f76..f35dd21 100644 --- a/.htaccess +++ b/.htaccess @@ -10,7 +10,13 @@ # Fix for https://httpoxy.org vulnerability -Header unset Proxy + + RequestHeader unset Proxy + + + SecRule &REQUEST_HEADERS:Proxy "@gt 0" "id:1000005,log,deny,msg:'httpoxy denied'" + + RewriteEngine on