This commit is contained in:
Martin Polden 2018-08-14 21:32:29 +02:00
parent 569c2f3879
commit a9c0587f87
2 changed files with 5 additions and 5 deletions

View File

@ -49,12 +49,11 @@ func New(db geo.Reader) *Server {
}
func ipFromForwardedForHeader(v string) string {
// Handle both comma and comma+space separator
ips := strings.Fields(strings.Replace(v, ",", " ", -1))
if len(ips) == 0 {
return ""
sep := strings.Index(v, ",")
if sep == -1 {
return v
}
return ips[0]
return v[:sep]
}
func ipFromRequest(headers []string, r *http.Request) (net.IP, error) {

View File

@ -163,6 +163,7 @@ func TestIPFromRequest(t *testing.T) {
{"127.0.0.1:9999", "X-Forwarded-For", "1.3.3.7", []string{"X-Real-IP", "X-Forwarded-For"}, "1.3.3.7"}, // Second trusted header matches
{"127.0.0.1:9999", "X-Forwarded-For", "1.3.3.7,4.2.4.2", []string{"X-Forwarded-For"}, "1.3.3.7"}, // X-Forwarded-For with multiple entries (commas separator)
{"127.0.0.1:9999", "X-Forwarded-For", "1.3.3.7, 4.2.4.2", []string{"X-Forwarded-For"}, "1.3.3.7"}, // X-Forwarded-For with multiple entries (space+comma separator)
{"127.0.0.1:9999", "X-Forwarded-For", "", []string{"X-Forwarded-For"}, "127.0.0.1"}, // Empty header
}
for _, tt := range tests {
r := &http.Request{