+1 -1

VERSION

··· 1 - 1.14.0

··· 1 + 1.14.1

+1

cmd/anubis/main.go

··· 214 var h http.Handler 215 h = mux 216 h = internal.DefaultXRealIP(*debugXRealIPDefault, h) 0 217 218 srv := http.Server{Handler: h} 219 listener, url := setupListener(*bindNetwork, *bind)

··· 214 var h http.Handler 215 h = mux 216 h = internal.DefaultXRealIP(*debugXRealIPDefault, h) 217 + h = internal.XForwardedForToXRealIP(h) 218 219 srv := http.Server{Handler: h} 220 listener, url := setupListener(*bindNetwork, *bind)

+7

docs/docs/CHANGELOG.md

··· 11 12 ## [Unreleased] 13 0 0 0 0 0 0 0 14 ## v1.14.0 15 16 Livia sas Junius

··· 11 12 ## [Unreleased] 13 14 + ## v1.14.1 15 + 16 + Livia sas Junius: Echo 1 17 + 18 + - Set the `X-Real-Ip` header based on the contents of `X-Forwarded-For` 19 + [#62](https://github.com/TecharoHQ/anubis/issues/62) 20 + 21 ## v1.14.0 22 23 Livia sas Junius

+1

go.mod

··· 34 github.com/prometheus/client_model v0.6.1 // indirect 35 github.com/prometheus/common v0.62.0 // indirect 36 github.com/prometheus/procfs v0.15.1 // indirect 0 37 golang.org/x/mod v0.24.0 // indirect 38 golang.org/x/net v0.37.0 // indirect 39 golang.org/x/sync v0.12.0 // indirect

··· 34 github.com/prometheus/client_model v0.6.1 // indirect 35 github.com/prometheus/common v0.62.0 // indirect 36 github.com/prometheus/procfs v0.15.1 // indirect 37 + github.com/sebest/xff v0.0.0-20210106013422-671bd2870b3a // indirect 38 golang.org/x/mod v0.24.0 // indirect 39 golang.org/x/net v0.37.0 // indirect 40 golang.org/x/sync v0.12.0 // indirect

+2

go.sum

··· 59 github.com/prometheus/common v0.62.0/go.mod h1:vyBcEuLSvWos9B1+CyL7JZ2up+uFzXhkqml0W5zIY1I= 60 github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc= 61 github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk= 0 0 62 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= 63 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= 64 github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=

··· 59 github.com/prometheus/common v0.62.0/go.mod h1:vyBcEuLSvWos9B1+CyL7JZ2up+uFzXhkqml0W5zIY1I= 60 github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc= 61 github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk= 62 + github.com/sebest/xff v0.0.0-20210106013422-671bd2870b3a h1:iLcLb5Fwwz7g/DLK89F+uQBDeAhHhwdzB5fSlVdhGcM= 63 + github.com/sebest/xff v0.0.0-20210106013422-671bd2870b3a/go.mod h1:wozgYq9WEBQBaIJe4YZ0qTSFAMxmcwBhQH0fO0R34Z0= 64 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= 65 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= 66 github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=

+15

internal/headers.go

··· 5 "net/http" 6 7 "github.com/TecharoHQ/anubis" 0 8 ) 9 10 // UnchangingCache sets the Cache-Control header to cache a response for 1 year if ··· 33 next.ServeHTTP(w, r) 34 }) 35 } 0 0 0 0 0 0 0 0 0 0 0 0 0 0

··· 5 "net/http" 6 7 "github.com/TecharoHQ/anubis" 8 + "github.com/sebest/xff" 9 ) 10 11 // UnchangingCache sets the Cache-Control header to cache a response for 1 year if ··· 34 next.ServeHTTP(w, r) 35 }) 36 } 37 + 38 + // XForwardedForToXRealIP sets the X-Real-Ip header based on the contents 39 + // of the X-Forwarded-For header. 40 + func XForwardedForToXRealIP(next http.Handler) http.Handler { 41 + return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { 42 + if xffHeader := r.Header.Get("X-Forwarded-For"); r.Header.Get("X-Real-Ip") == "" && xffHeader != "" { 43 + ip := xff.Parse(xffHeader) 44 + slog.Debug("setting x-real-ip", "val", ip) 45 + r.Header.Set("X-Real-Ip", ip) 46 + } 47 + 48 + next.ServeHTTP(w, r) 49 + }) 50 + }