yearning sql审计

https://next.yearning.io/

# 反向代理配置《坑》
由于Yearning中个别功能使用websocket进行通信。如采用反向代理的方式访问Yearning请在代理层对websocket协议进行代理支持。

例如: nginx 需要配置 proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade";

直接上代码吧：
```
[root@localhost conf.d]# vim yearning.laifuyun.conf
 
upstream yearningbackend {
   server 192.168.50.118:8000;
}
 
server {
    listen     80;
    listen     443 ssl http2;
    server_name yearning.laifuyun.com;
 
    ssl_certificate      /mnt/server/ssl/laifuyun.com/fullchain.pem;
    ssl_certificate_key  /mnt/server/ssl/laifuyun.com/privkey.pem;
 
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers  EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    ssl_prefer_server_ciphers   on;
 
    location / {
        proxy_pass http://yearningbackend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}
```