ari/arimelody.me
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

trim extra IPs from x-forwarded-for header

Browse source
This commit is contained in:
ari melody 2025-02-07 17:15:02 +00:00
parent 23dbbf26e3
commit edb4d7df3a
Signed by: ari
GPG key ID: CF99829C92678188
2 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
bundle.sh
View file

@ -6,4 +6,4 @@ if [ ! -f arimelody-web ]; then
exit 1
fi
tar czvf arimelody-web.tar.gz arimelody-web admin/components/ admin/views/ admin/static/ views/ public/ schema-migration/
tar czf arimelody-web.tar.gz arimelody-web admin/components/ admin/views/ admin/static/ views/ public/ schema-migration/

2
controller/ip.go
View file

@ -14,6 +14,8 @@ func ResolveIP(app *model.AppState, r *http.Request) string {
if slices.Contains(app.Config.TrustedProxies, addr) {
forwardedFor := r.Header.Get("x-forwarded-for")
if len(forwardedFor) > 0 {
// discard extra IPs; cloudflare tends to append their nodes
forwardedFor = strings.Split(forwardedFor, ", ")[0]
return forwardedFor
}
}