Uploaded image for project: 'SonarQube'
  1. SonarQube
  2. SONAR-7856

Do not use "sonar.core.serverBaseURL" to detect if server is using SSL

    Details

      Description

      To detect if the server is using SSL, we're currently reading the value of the property "sonar.core.serverBaseURL" and check if it contains "https".

      It's better to check that the request header "X-Forwarded-Proto" is set to "https".

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                julien.lancelot Julien Lancelot
                Reporter:
                julien.lancelot Julien Lancelot
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Due:
                  Created:
                  Updated:
                  Resolved: