guimard commented on PR #2692: URL: https://github.com/apache/james-project/pull/2692#issuecomment-2769643582
Following HTTP specs, the X-Forwarded-Header may contain [several IP addresses](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Forwarded-For). Thus the header maybe agreed or not depending on the proxy IP address. Here I don't think we should validate intermediate IP addresses, but: - read the good one - validate that current IP address is in the list of agreed proxies - and then if all is OK, replace source IP by the value given by header -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@james.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: notifications-unsubscr...@james.apache.org For additional commands, e-mail: notifications-h...@james.apache.org
