mirror of
https://github.com/miniflux/v2.git
synced 2024-08-17 18:03:26 +02:00
HTTP headers like X-Forwarded-For or X-Real-Ip can be easily spoofed. As such, it cannot be used to test if the client IP is allowed. The recommendation is to use HTTP Basic authentication to protect the metrics endpoint, or run Miniflux behind a trusted reverse-proxy. |
||
---|---|---|
.. | ||
client_ip_test.go | ||
client_ip.go | ||
context_test.go | ||
context.go | ||
cookie_test.go | ||
cookie.go | ||
doc.go | ||
params_test.go | ||
params.go |