Émile Ré 9920093c22
Use rightmost IP from forwarded headers ...
A client can prepend a spoofed entry to X-Forwarded-For before
the request reaches our load balancer. Taking the first value
would return the attacker's address. Since we sit behind a
single trusted LB that appends the real client IP as the last
entry, switch to rightmost extraction for both X-Forwarded-For
and RFC 7239 Forwarded headers.
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-04-29 14:16:37 +04:00
2026-04-27 10:49:22 +02:00
2026-04-26 23:21:50 +02:00
2026-04-27 10:30:14 +02:00
2026-03-25 17:38:32 +01:00
2026-03-25 17:38:32 +01:00
2026-03-25 17:38:32 +01:00
2026-04-29 12:48:44 +04:00
2026-04-24 16:05:11 +02:00
2026-04-22 19:02:22 +02:00
2026-04-28 18:07:46 +02:00
2026-04-22 11:15:48 +02:00
2026-04-28 15:28:18 +04:00
2026-04-28 18:07:46 +02:00
2026-04-19 12:00:53 +02:00
2026-04-28 18:07:46 +02:00
2026-04-13 12:25:42 +02:00
2026-03-31 13:31:30 +02:00
2026-04-03 11:56:06 +02:00
2026-03-26 17:34:04 +01:00
2026-03-31 19:16:56 +04:00
2026-04-19 12:00:53 +02:00
2026-03-25 17:38:32 +01:00
2026-04-23 10:45:48 +02:00
2026-04-26 22:58:21 +02:00
2026-03-25 17:38:32 +01:00
2026-04-13 12:25:42 +02:00
2026-04-13 12:25:42 +02:00
2026-04-19 12:00:53 +02:00
2026-03-25 17:38:32 +01:00
2026-04-23 20:50:25 +02:00
2026-04-28 18:07:46 +02:00
2026-04-29 12:48:44 +04:00
2026-04-29 12:48:43 +04:00
2026-04-09 14:47:48 +04:00
2026-04-02 14:37:29 +02:00
2026-03-31 10:51:34 +02:00
2026-04-20 09:46:44 +02:00
2026-04-20 09:46:44 +02:00
2026-04-29 14:16:37 +04:00
2026-04-13 19:24:46 +02:00
2026-03-25 17:38:32 +01:00
2026-04-20 09:46:44 +02:00
2026-04-23 20:50:25 +02:00
2026-04-19 12:00:53 +02:00
2026-04-24 12:18:10 +04:00
2026-03-25 17:38:32 +01:00
2026-04-24 08:43:14 +02:00
2026-04-20 15:37:39 +02:00
9920093c22