gitea

public/gitea

0 Fork 0

mirror of https://github.com/go-gitea/gitea.git synced 2026-10-23 19:47:07 +09:00

Files

T

History

silverwind 5e4ed4d508 fix: correctly parse and validate forwarded client IPs and remove unmaintained chi-middleware/proxy (#39190 )

Replace the unmaintained `chi-middleware/proxy` with an in-tree handler
that detects client IPs correctly behind common reverse proxies.

1. Handle repeated header lines and comma-separated proxy hops.
2. Accept and normalize IPs, including `ip:port`.
3. Keep the client port from the header value or `X-Real-Port` instead
of logging port 0.
4. Prefer the last `X-Real-IP` line.
5. Keep the proxy's address when the selected value is invalid.
6. Read `Forwarded` only when `X-Forwarded-For` is absent.

Docs PR: https://gitea.com/gitea/docs/pulls/560
Fixes: https://github.com/go-gitea/gitea/issues/35682
Fixes: https://github.com/go-gitea/gitea/issues/36814
Co-authored-by: bircni <bircni@icloud.com>

2026-10-23 09:25:04 +00:00

api

perf(actions): cache successful runner token verification (#39934 )

2026-10-23 03:59:11 +00:00

common

fix: correctly parse and validate forwarded client IPs and remove unmaintained chi-middleware/proxy (#39190 )

2026-10-23 09:25:04 +00:00

install

refactor: "install" page (#39400 )

2026-09-23 23:14:31 +00:00

private

feat(repo): allow deleting protected branches (#39243 )