Merge pull request #1367 from haarg/revproxy-proto-order

perfer X-Forwarded-Proto to prevent users lying
PerlDancer · Aug 14, 2017 · b9f3709 · b9f3709
2 parents 06b6c9b + 03d89b4
commit b9f3709
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Dancer2/Core/Request.pm b/lib/Dancer2/Core/Request.pm
@@ -167,8 +167,8 @@ sub forwarded_host        { shift->env->{'HTTP_X_FORWARDED_HOST'} }
 
 # there are two options
 sub forwarded_protocol    {
-    $_[0]->env->{'HTTP_X_FORWARDED_PROTOCOL'} ||
     $_[0]->env->{'HTTP_X_FORWARDED_PROTO'}    ||
+    $_[0]->env->{'HTTP_X_FORWARDED_PROTOCOL'} ||
     $_[0]->env->{'HTTP_FORWARDED_PROTO'}
 }