Author: bkuhn
Date: Wed Dec  3 04:36:56 2008
New Revision: 5126

URL: http://svn.gna.org/viewcvs/pokersource?rev=5126&view=rev
Log:
pokersite.Request.getClientIP() now returns the IP number being proxied.

It uses X-Forwarded-For header if present, falling back to
X-Cluster-Client-IP if it isn't.  If neither are present, it calls the
superclass's getClientIP().

This should move sr#2157 from Important/Immediate to Wishlist/Later.  We
cannot close the ticket completely because we are currently being
overly-trusting of those headers, which can easily be forged.  We need a
better solution long term.

Merge commit quick-patch-devel into trunk.

Modified:
    trunk/poker-network/ChangeLog
    trunk/poker-network/pokernetwork/pokersite.py
    trunk/poker-network/tests/test-pokersite.py.in


_______________________________________________
Pokersource-commits mailing list
[email protected]
https://mail.gna.org/listinfo/pokersource-commits

Reply via email to