rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,748 Commits 1 Branch 0 Tags
7aaaac3af83020e00a9e520b62e5f1eeaccef9ab
Commit Graph

4 Commits

Author SHA1 Message Date
Sacha Al Himdani
9ac71f948f Update contact email to hello@probo.com 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-06-09 16:45:23 +02:00
Émile Ré
9156d6a16a Add wsl linter and fix 
Signed-off-by: Émile Ré <emile@probo.com>
 2026-05-20 09:27:28 +04:00
Émile Ré
9920093c22 Use rightmost IP from forwarded headers 
A client can prepend a spoofed entry to X-Forwarded-For before
the request reaches our load balancer. Taking the first value
would return the attacker's address. Since we sit behind a
single trusted LB that appends the real client IP as the last
entry, switch to rightmost extraction for both X-Forwarded-For
and RFC 7239 Forwarded headers.

Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-29 14:16:37 +04:00
Émile Ré
e3ab373a0c Add trusted proxy middleware and simplify clientip 
Strip forwarded headers (Forwarded, X-Forwarded-For, X-Real-Ip)
from requests originating from untrusted proxies at the HTTP
server level, reusing the existing proxy-protocol trusted-proxies
config. The clientip package is now a pure extraction helper;
context plumbing and middleware wrappers are removed.

Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-15 10:21:01 +04:00