fix: Only read the first ip of the x-forwarded-for header (#9545)

ParabolInc · Mar 18, 2024 · 081f7a0 · 081f7a0
1 parent 0217e11
commit 081f7a0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/server/utils/uwsGetIP.ts b/packages/server/utils/uwsGetIP.ts
@@ -1,7 +1,7 @@
 import {HttpRequest, HttpResponse} from 'uWebSockets.js'
 
 const uwsGetIP = (res: HttpResponse, req: HttpRequest) => {
-  const clientIp = req.getHeader('x-forwarded-for')
+  const clientIp = req.getHeader('x-forwarded-for')?.split(',')[0]
   if (clientIp) return clientIp
   // returns ipv6 e.g. '0000:0000:0000:0000:0000:ffff:ac11:0001'
   return Buffer.from(res.getRemoteAddressAsText()).toString()