mleku/reverse
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix X-Forwarded-For header to use only the first IP in the client IP list

Browse Source
This commit is contained in:
mleku
2025-08-21 14:49:13 +01:00
parent 9085df44b8
commit b98a7d525b
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
main.go
View File

@@ -470,7 +470,8 @@ func setProxy(mapping map[string]string) (http.Handler, error) {
// Backward-compatible header widely used by apps
req.Header.Set("X-Forwarded-Proto", "https")
clientIP := remoteIP(req.RemoteAddr)
req.Header.Set("X-Forwarded-For", clientIP)
split := strings.Split(clientIP, ", ")
req.Header.Set("X-Forwarded-For", split[0])
// Standard RFC 7239 Forwarded header
appendForwardedHeader(req)
log.I.S(req.Header)
@@ -632,7 +633,8 @@ func newSingleHostReverseProxy(target *url.URL) *httputil.ReverseProxy {
// Backward-compatible header widely used by apps
req.Header.Set("X-Forwarded-Proto", "https")
clientIP := remoteIP(req.RemoteAddr)
req.Header.Set("X-Forwarded-For", clientIP)
split := strings.Split(clientIP, ", ")
req.Header.Set("X-Forwarded-For", split[0])
// Standard RFC 7239 Forwarded header
appendForwardedHeader(req)
log.I.S(req.Header)