message: mitigate CVE-2018-14773
diff: @@ -39,6 +39,10 @@ fastcgi_param REDIRECT_STATUS 200;
  # Mitigate https://httpoxy.org/ vulnerabilities
  fastcgi_param HTTP_PROXY "";
  +# Mitigate CVE-2018-14773: https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-risky-http-headers
  +fastcgi_param HTTP_X-ORIGINAL-URL "";
  +fastcgi_param HTTP_X_REWRITE_URL "";
  +
  fastcgi_keep_conn on;
  fastcgi_index index.php;
  fastcgi_hide_header 'X-Generator';
  