diff --git a/app/controllers/general.php b/app/controllers/general.php index 349a97eb36..1c4523cd4f 100644 --- a/app/controllers/general.php +++ b/app/controllers/general.php @@ -292,7 +292,7 @@ App::init() * @see https://www.owasp.org/index.php/List_of_useful_HTTP_headers */ if (App::getEnv('_APP_OPTIONS_FORCE_HTTPS', 'disabled') === 'enabled') { // Force HTTPS - if ($request->getProtocol() !== 'https' && $origin !== 'localhost') { // Localhost allowed for proxy + if ($request->getProtocol() !== 'https' && $swooleRequest->header['host'] ?? '' !== 'localhost') { // Localhost allowed for proxy if ($request->getMethod() !== Request::METHOD_GET) { throw new AppwriteException(AppwriteException::GENERAL_PROTOCOL_UNSUPPORTED, 'Method unsupported over HTTP.'); }