Re: [Catalyst] Re: X-Forwarded-For

2008-04-02 Thread Bill Moseley
On Wed, Apr 02, 2008 at 11:45:59AM +0100, Dagfinn Ilmari Mannsåker wrote: > Bill Moseley <[EMAIL PROTECTED]> writes: > > > On Tue, Apr 01, 2008 at 11:38:15PM -0400, Andy Grundman wrote: > >> > >> When using X-Forwarded-For you cannot trust any value that is not > >> added by your own upstream p

[Catalyst] Re: X-Forwarded-For

2008-04-02 Thread Dagfinn Ilmari Mannsåker
Bill Moseley <[EMAIL PROTECTED]> writes: > On Tue, Apr 01, 2008 at 11:38:15PM -0400, Andy Grundman wrote: >> >> When using X-Forwarded-For you cannot trust any value that is not >> added by your own upstream proxy, so we only want to use the last >> value in the list. > > Ah, right. In this