You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ef721fc430
HTTP headers X_FORWARDED_* and X_REAL_IP are only evaluated when received from an IP listed in proxy_whitelist. Furthermore, only the last non-trusted IP from X-Forwarded-For is used in place of the real ip. Without this, an attacker can easily spoof the headers and control the result of the ip or ssl check. This fixes several problems with [ |
11 years ago | |
---|---|---|
.. | ||
include | 11 years ago | |
js | 11 years ago | |
lib | 11 years ago | |
localization | 11 years ago | |
resources | 12 years ago | |
steps | 11 years ago |