🩹 Fix: validate IP addresses in App.handleTrustedProxy

gofiber · Oct 16, 2024 · a7d8479 · a7d8479
1 parent 9c12e40
commit a7d8479
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/app.go b/app.go
@@ -571,7 +571,12 @@ func (app *App) handleTrustedProxy(ipAddress string) {
 			app.config.TrustProxyConfig.ranges = append(app.config.TrustProxyConfig.ranges, ipNet)
 		}
 	} else {
-		app.config.TrustProxyConfig.ips[ipAddress] = struct{}{}
+		ip := net.ParseIP(ipAddress)
+		if ip == nil {
+			log.Warnf("IP address %q could not be parsed", ipAddress)
+		} else {
+			app.config.TrustProxyConfig.ips[ipAddress] = struct{}{}
+		}
 	}
 }