New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent x-forwarded-for spoofing #6

Open

arunoda opened this issue Mar 27, 2015 · 0 comments

Labels

Member

arunoda commented Mar 27, 2015

So, it's possible for someone to spoof our x-forwarded-for header. May be we need to do something about that.

Here are possible solutions:

get the proxy count from before starting the app

So, if there's a proxy chain we can pick the actual address, regardless whether user set it or not.

arunoda added the bug label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment