Merge pull request #28 from mbandizzle/patch-1

lmajano · web-flow · commit 3016e8eedc14 · 2021-03-10T13:02:26.000-06:00
Fix getRealIP() to only return originating user's source IP
diff --git a/interceptors/Security.cfc b/interceptors/Security.cfc
@@ -737,7 +737,7 @@ component accessors="true" extends="coldbox.system.Interceptor" {
 			return headers[ "X-Forwarded-For" ];
 		}
 
-		return len( CGI.REMOTE_ADDR ) ? CGI.REMOTE_ADDR : "127.0.0.1";
+		return len( CGI.REMOTE_ADDR ) ? trim( listFirst( CGI.REMOTE_ADDR ) ) : "127.0.0.1";
 	}
 
 	/**

Original file line number	Diff line number	Diff line change
`@@ -737,7 +737,7 @@ component accessors="true" extends="coldbox.system.Interceptor" {`
`737`	`737`	`return headers[ "X-Forwarded-For" ];`
`738`	`738`	`}`
`739`	`739`
`740`		`- return len( CGI.REMOTE_ADDR ) ? CGI.REMOTE_ADDR : "127.0.0.1";`
	`740`	`+ return len( CGI.REMOTE_ADDR ) ? trim( listFirst( CGI.REMOTE_ADDR ) ) : "127.0.0.1";`
`741`	`741`	`}`
`742`	`742`
`743`	`743`	`/**`