Process incoming HTTP headers in application on backend.proxy-setup

Caution: make sure the application is only accessible via a proxy
which will properly clear and set these headers, so that the end user
cannot gain extra privileges.

1 files changed, 11 insertions, 2 deletions

diff --git a/app.conf b/app.conf
index bba0242..736123b 100644
--- a/app.conf
+++ b/app.conf
@@ -1,3 +1,12 @@
+Listen localhost:8888
+<VirtualHost localhost:8888>
+ServerName localhost:8888
+ScriptAlias /bapplication /var/www/backend/app.cgi
 
-ScriptAlias /application /var/www/app/app.cgi
-
+<Location /bapplication>
+	SetEnv FRONTEND_SCRIPT_NAME /application
+	Order deny,allow
+	Deny from all
+	Allow from 127.0.0.1 ::1
+</Location>
+</VirtualHost>