mirror of
https://github.com/Mailu/Mailu.git
synced 2024-12-14 10:53:30 +02:00
7e86f5cb57
1959: Ensure that we don't trust client headers r=mergify[bot] a=nextgens ## What type of PR? bug-fix ## What does this PR do? Document how REAL_IP_FROM and REAL_IP_HEADER should be used. Ensure that we strip True-Client-IP and X-Forwarded-For if neither are set. We should also update the documentation on reverse-proxies... but that's #1958 ### Related issue(s) - #1958 ## Prerequistes Before we can consider review and merge, please make sure the following list is done and checked. If an entry in not applicable, you can check it or remove it from the list. - [x] In case of feature or enhancement: documentation updated accordingly - [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file. Co-authored-by: Florent Daigniere <nextgens@freenetproject.org> |
||
---|---|---|
.. | ||
_templates | ||
assets | ||
compose | ||
contributors | ||
kubernetes/mailu | ||
swarm | ||
.env | ||
antispam.rst | ||
cli.rst | ||
conf.py | ||
configuration.rst | ||
database.rst | ||
demo.rst | ||
dns.rst | ||
docker-compose.yml | ||
Dockerfile | ||
faq.rst | ||
features.rst | ||
general.rst | ||
index.rst | ||
maintain.rst | ||
nginx.conf | ||
releases.rst | ||
requirements.txt | ||
reverse.rst | ||
rpi_build.rst | ||
setup.rst | ||
webadministration.rst |