Closed liut closed 6 years ago
Unfortunately silently swapping X-Forwarded-For is insecure. Maybe an option TrustProxy and also using https://github.com/tomasen/realip?
X-Forwarded-For
TrustProxy
OK, tomasen/realip is better solution!
tomasen/realip
Will close for now, though happy to discuss any proposed API, the important part is that its opt-in
Unfortunately silently swapping
X-Forwarded-For
is insecure. Maybe an optionTrustProxy
and also using https://github.com/tomasen/realip?