trim extra IPs from x-forwarded-for header

This commit is contained in:
ari melody 2025-02-07 17:15:02 +00:00
parent 23dbbf26e3
commit edb4d7df3a
Signed by: ari
GPG key ID: CF99829C92678188
2 changed files with 3 additions and 1 deletions

View file

@ -14,6 +14,8 @@ func ResolveIP(app *model.AppState, r *http.Request) string {
if slices.Contains(app.Config.TrustedProxies, addr) {
forwardedFor := r.Header.Get("x-forwarded-for")
if len(forwardedFor) > 0 {
// discard extra IPs; cloudflare tends to append their nodes
forwardedFor = strings.Split(forwardedFor, ", ")[0]
return forwardedFor
}
}