We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 4d72835 commit d5f80cbCopy full SHA for d5f80cb
internal/web/web.go
@@ -59,7 +59,7 @@ func getClientIP(r *http.Request) string {
59
60
// Only trust proxy headers if the connection is from localhost
61
// Check for various localhost representations
62
- if host == "127.0.0.1" || host == "::1" || host == "localhost" || host == "0.0.0.0" {
+ if host == "127.0.0.1" || host == "::1" || host == "localhost" {
63
// Check X-Real-IP first (higher priority)
64
if realIP := r.Header.Get("X-Real-IP"); realIP != "" {
65
return realIP
0 commit comments