sophie/nuke
1
0
Fork 0
Code Packages 1 Activity Actions

feat(cmd/anubis): compute full XFF header (#328)

Browse source 
* feat(cmd/anubis): compute full XFF header

this one is pretty important to not pass
through blindly, as many applications and
frameworks will trust them

* feat(cmd/anubis): skip XFF compute if remote address is loopback

* docs: update CHANGELOG
This commit is contained in:
Aurelia 2025-04-23 06:06:47 +02:00 • committed by GitHub
parent bec7199ab6
commit 4e2c9de708
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 42 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
cmd/anubis/main.go
View file

@ -280,6 +280,7 @@ func main() {
h = s
h = internal.RemoteXRealIP(*useRemoteAddress, *bindNetwork, h)
h = internal.XForwardedForToXRealIP(h)
h = internal.XForwardedForUpdate(h)
srv := http.Server{Handler: h}
listener, listenerUrl := setupListener(*bindNetwork, *bind)