Skip to content

Commit 0c11830

Browse files
keulinhomitelg
andauthored
Update resources/references/security.md
Co-authored-by: Michael Telgmann <mitelg@users.noreply.github.com>
1 parent f5d5054 commit 0c11830

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

resources/references/security.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,8 @@ Shopware 6 stores and processes a wide variety of files. This goes from product
4141

4242
Shopware offers a convenience feature to allow media file uploads by directly providing a URL pointing to a third party location containing that file.
4343
By default, Shopware validates the URL to ensure that it points to a publicly accessible resource; this prevents attacks where internal networking information might be leaked. You can disable this validation by toggling the `shopware.media.enable_url_validation` to false.
44-
However, there is still some security risk in this approach, as your shopware server does make a request to the external URL and therefore discloses some information about itself (e.g. IP address or user agent). If this is a concern to you, you can disable the whole URL upload feature by setting `shopware.media.enable_url_upload_feature = false`.
44+
However, there is still some security risk in this approach, as your Shopware server makes a request to the external URL and therefore discloses some information about itself (e.g. IP address or user agent).
45+
If this is a concern to you, you can disable the whole URL upload feature by setting `shopware.media.enable_url_upload_feature = false`.
4546

4647
## GDPR compliance
4748

0 commit comments

Comments
 (0)