From bf33a42ae8df56d35beadcb4bcd3815bf2747aab Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Tue, 24 Feb 2026 12:48:25 +0100 Subject: [PATCH] Validate request_id_header not to be misunderstood (Z#23225356) (#5920) --- src/pretix/settings.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/pretix/settings.py b/src/pretix/settings.py index f02c840e6..508b185b3 100644 --- a/src/pretix/settings.py +++ b/src/pretix/settings.py @@ -211,6 +211,10 @@ USE_X_FORWARDED_HOST = config.getboolean('pretix', 'trust_x_forwarded_host', fal REQUEST_ID_HEADER = config.get('pretix', 'request_id_header', fallback=False) +if REQUEST_ID_HEADER in config.cp.BOOLEAN_STATES: + raise ImproperlyConfigured( + "request_id_header should be set to a header name, not a boolean value." + ) if config.getboolean('pretix', 'trust_x_forwarded_proto', fallback=False): SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')