From 4e2c9de7085fbc8e5abe8d0659d807881d69769c Mon Sep 17 00:00:00 2001
From: Aurelia <aurelia@acuteaura.net>
Date: Wed, 23 Apr 2025 06:06:47 +0200
Subject: feat(cmd/anubis): compute full XFF header (#328)

* feat(cmd/anubis): compute full XFF header

this one is pretty important to not pass
through blindly, as many applications and
frameworks will trust them

* feat(cmd/anubis): skip XFF compute if remote address is loopback

* docs: update CHANGELOG
---
 cmd/anubis/main.go | 1 +
 1 file changed, 1 insertion(+)

(limited to 'cmd')

diff --git a/cmd/anubis/main.go b/cmd/anubis/main.go
index fafd1b1..b7375ea 100644
--- a/cmd/anubis/main.go
+++ b/cmd/anubis/main.go
@@ -280,6 +280,7 @@ func main() {
 	h = s
 	h = internal.RemoteXRealIP(*useRemoteAddress, *bindNetwork, h)
 	h = internal.XForwardedForToXRealIP(h)
+	h = internal.XForwardedForUpdate(h)
 
 	srv := http.Server{Handler: h}
 	listener, listenerUrl := setupListener(*bindNetwork, *bind)
-- 
cgit v1.2.3