[
https://issues.apache.org/jira/browse/ZOOKEEPER-5042?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andor Molnar resolved ZOOKEEPER-5042.
-------------------------------------
Fix Version/s: 3.10.0
3.9.6
Resolution: Fixed
> Enhance X-Forwarded-For setting in IPAuthenticationProvider
> -----------------------------------------------------------
>
> Key: ZOOKEEPER-5042
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5042
> Project: ZooKeeper
> Issue Type: Improvement
> Components: documentation
> Reporter: Andor Molnar
> Assignee: Andor Molnar
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.10.0, 3.9.6
>
> Time Spent: 1h
> Remaining Estimate: 0h
>
> Docs improvement needed: Highlight the security risk which is introduced by
> enabling the feature.
> Also it would be safer to pick the rightmost IP address from the given list
> in case somebody altered it in the call chain.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
