RemoteIp: only trust X-Forwarded-For
authorrinpatch <rinpatch@sdf.org>
Wed, 29 Jan 2020 20:59:27 +0000 (23:59 +0300)
committerrinpatch <rinpatch@sdf.org>
Wed, 29 Jan 2020 21:06:58 +0000 (00:06 +0300)
commit889965141a1411dd546757fbb964695bd8f712d7
tree4c2e58cdf1f0e0bb1c5c20f4671eada7eb5b0091
parentf5cb2af85a2a3798d18d887b5947a65979cb65b9
RemoteIp: only trust X-Forwarded-For

Our nginx config will happily pass `Forwarded`/`X-Real-IP` from the
client. Caddy, Apache and Varnish pass `X-Forwarded-For` as well anyway.
docs/configuration/cheatsheet.md
lib/pleroma/plugs/remote_ip.ex