fix(middleware): left deafult ProxyHeader config item as blank to reduce risk of fake xff (#2760)

2025-12-15 10:04:01 +08:00 · 2025-08-12 09:35:36 +08:00
parent 8deeadb1e5
commit bb3db2e326
2 changed files with 2 additions and 2 deletions
--- a/application/migrator/conf/defaults.go
+++ b/application/migrator/conf/defaults.go
@@ -22,7 +22,7 @@ var SystemConfig = &system{
 	Debug:       false,
 	Mode:        "master",
 	Listen:      ":5212",
-	ProxyHeader: "X-Forwarded-For",
+	ProxyHeader: "",
 }

 // CORSConfig 跨域配置
--- a/pkg/conf/types.go
+++ b/pkg/conf/types.go
@@ -114,7 +114,7 @@ var SystemConfig = &System{
 	Debug:       false,
 	Mode:        MasterMode,
 	Listen:      ":5212",
-	ProxyHeader: "X-Forwarded-For",
+	ProxyHeader: "",
 	LogLevel:    "info",
 }