CDN Host is ignoring "X-Forwared-Proto" header

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.3.X, Master
• Fix Version/s: 7.2.10 DXP FP11, 7.2.10.4 DXP SP4, 7.2.X, 7.3.10 DXP FP1, 7.3.10.1 DXP SP1, 7.3.6 CE GA7, 7.3.X, 7.4.2 CE GA3, 7.4.13 DXP GA1, Master
• Component/s: Portal Configuration
• Labels:
  • 7.3-pre-fp1
  • ee-ts
  • liferay-dxp-72-sp4
  • liferay-dxp-73-sp1
  • liferay-fixpack-dxp-1-7310
  • liferay-fixpack-dxp-11-7210
• Branch Version/s:
  7.3.x, 7.2.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/98282

Now you always get the cdn host from the cdn.host.http property because the web.server.forwarded.protocol.enabled property is ignored and thus the "X-Forwared-Proto" header too.

However when the web.server.forwarded.protocol.enabled property is true, the protocol should be obtained from the "X-Forwared-Proto" header and with this information, return the cdn host of the specyfic property: cdn.host.http or cdn.host.https.

 

You can see here that this check is not enough.