Skip to content
This repository was archived by the owner on Sep 10, 2024. It is now read-only.

Commit 3ab733b

Browse files
authored
Fix RFC1918 network in default proxy configuration (#2908)
1 parent 732fac1 commit 3ab733b

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

crates/config/src/sections/http.rs

+1-1
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ fn is_default_http_listener_assets_path(value: &Utf8PathBuf) -> bool {
6565

6666
fn default_trusted_proxies() -> Vec<IpNetwork> {
6767
vec![
68-
IpNetwork::new([192, 128, 0, 0].into(), 16).unwrap(),
68+
IpNetwork::new([192, 168, 0, 0].into(), 16).unwrap(),
6969
IpNetwork::new([172, 16, 0, 0].into(), 12).unwrap(),
7070
IpNetwork::new([10, 0, 0, 0].into(), 10).unwrap(),
7171
IpNetwork::new(std::net::Ipv4Addr::LOCALHOST.into(), 8).unwrap(),

docs/config.schema.json

+2-2
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@
6666
}
6767
],
6868
"trusted_proxies": [
69-
"192.128.0.0/16",
69+
"192.168.0.0/16",
7070
"172.16.0.0/12",
7171
"10.0.0.0/10",
7272
"127.0.0.1/8",
@@ -586,7 +586,7 @@
586586
"trusted_proxies": {
587587
"description": "List of trusted reverse proxies that can set the `X-Forwarded-For` header",
588588
"default": [
589-
"192.128.0.0/16",
589+
"192.168.0.0/16",
590590
"172.16.0.0/12",
591591
"10.0.0.0/10",
592592
"127.0.0.1/8",

0 commit comments

Comments
 (0)