Add fix to ensure that X-Client-IP header is dropped when is not a tr…

…usted header.
GrahamDumpleton · Jul 18, 2022 · af3c0c2 · af3c0c2
1 parent f4e5138
commit af3c0c2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/server/mod_wsgi.c b/src/server/mod_wsgi.c
@@ -14055,6 +14055,7 @@ static void wsgi_process_proxy_headers(request_rec *r)
             name = ((const char**)trusted_proxy_headers->elts)[i];
 
             if (!strcmp(name, "HTTP_X_FORWARDED_FOR") ||
+                     !strcmp(name, "HTTP_X_CLIENT_IP") ||
                      !strcmp(name, "HTTP_X_REAL_IP")) {
 
                 match_client_header = 1;