mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2025-08-17 09:02:15 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

reset x-forwarded-for before next req;

Browse source 
assume the following stack: cpp <- rproxyA <- rproxyB <- WAN

if A also accepts WAN requests, and A muxes both B and WAN
onto a single connection to cpp, then WAN requests may get
tagged with the IP-address of the most recent B request

aside from the confusing logs, this could break
unpost on servers with shared accounts
This commit is contained in:
ed 2025-07-07 08:47:24 +00:00
parent ed908b9868
commit 1b2d39857b
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
copyparty/httpconn.py
View file

@ -224,3 +224,6 @@ class HttpConn(object):
if self.u2idx: if self.u2idx:
self.hsrv.put_u2idx(str(self.addr), self.u2idx) self.hsrv.put_u2idx(str(self.addr), self.u2idx)
self.u2idx = None self.u2idx = None
if self.rproxy:
self.set_rproxy()