fix(middleware): left deafult `ProxyHeader` config item as blank to reduce risk of fake xff

4 weeks ago · 31f5f723f4
parent 8deeadb1e5
commit 31f5f723f4
2 changed files with 2 additions and 2 deletions
--- a/application/migrator/conf/defaults.go
+++ b/application/migrator/conf/defaults.go
@ -22,7 +22,7 @@ var SystemConfig = &system{
 	Debug:       false,
 	Mode:        "master",
 	Listen:      ":5212",
-	ProxyHeader: "X-Forwarded-For",
+	ProxyHeader: "",
 }

 // CORSConfig 跨域配置
--- a/pkg/conf/types.go
+++ b/pkg/conf/types.go
@ -114,7 +114,7 @@ var SystemConfig = &System{
 	Debug:       false,
 	Mode:        MasterMode,
 	Listen:      ":5212",
-	ProxyHeader: "X-Forwarded-For",
+	ProxyHeader: "",
 	LogLevel:    "info",
 }