Remco e4f6e053d0 Fixed issue allowing to spoof ClientIP() ...

The X-Forwared-For can be used to spoof the real client ip. The middleware
introduced in this patch (which should only be used when having servers
in front of this servers) will filter all defined proxies (or local ip
addresses by default) and replace the RemoteAddr with the real client
ip.

2014-12-21 13:42:48 +01:00

12 KiB

Raw Blame History

View Raw