e3b42b2f10
This no longer hinges on app.debug because it creates confusion for devops engineers. This is based on three independent reports coming from app environments that use a reverse proxy. The engineer will follow the proper security instructions by disabling debug mode, which in turn creates an infinite redirect loop when opening the back-end area, only to leave them scratching their heads Ultimately it is the web server configuration's job to handle the enforcement of HTTPS, the app no longer enforces it as a strong opinion, but we still keep the setting available as a convenient security check for standard environments that do not use a reverse proxy |
||
|---|---|---|
| .. | ||
| AssetMaker.php | ||
| ConfigMaker.php | ||
| EventEmitter.php | ||
| PropertyContainer.php | ||
| ResponseMaker.php | ||
| SecurityController.php | ||
| ViewMaker.php | ||