Skip to content

Prevent cross-site SSL inheritance#1017

Merged
saeedvaziry merged 2 commits into3.xfrom
default-ssl
Feb 1, 2026
Merged

Prevent cross-site SSL inheritance#1017
saeedvaziry merged 2 commits into3.xfrom
default-ssl

Conversation

@saeedvaziry
Copy link
Member

closes #1010

@saeedvaziry saeedvaziry merged commit 3f502d3 into 3.x Feb 1, 2026
3 checks passed
@saeedvaziry saeedvaziry deleted the default-ssl branch February 1, 2026 12:29
@dyanakiev
Copy link
Member

dyanakiev commented Feb 1, 2026

Hey @saeedvaziry i don't see a way to apply this to existing servers. Unless manually.

@saeedvaziry
Copy link
Member Author

Yeah old servers need to handle it manually or just generate SSL for every site.

I haven't released this yet. If I can find a way for existing servers, I'll push

@dyanakiev
Copy link
Member

Running it as migration seems like possiblity

@saeedvaziry
Copy link
Member Author

More in favor of doing it when a new site being created than running it blindly on all servers

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: New sites without SSL inherit another site’s HTTPS vhost (isolation issue)

2 participants