[zope2-tracker] [Bug 885016] [NEW] Trusted Proxies not available in WebOb

[Matthew Wilkes]

Public bug reported:

WebOb will, by default, trust the first X-FORWARDED-FOR header, if set.
This is a regression compared to Zope 2.x's Trusted Proxies.

We need a WSGI Middleware that implements the trusted support, so if a
proxy is untrusted the REMOTE_ADDR needs to either be added to the start
of the X-FORWARDED-FOR if not there, or the X-FORWARDED-FOR header
removed.

** Affects: zope2
     Importance: Undecided
     Assignee: Matthew Wilkes (matthew-matthewwilkes)
         Status: New


** Tags: webob zope4

** Changed in: zope2
     Assignee: (unassigned) => Matthew Wilkes (matthew-matthewwilkes)

-- 
You received this bug notification because you are a member of Zope 2
Developers, which is subscribed to Zope 2.
https://bugs.launchpad.net/bugs/885016

Title:
  Trusted Proxies not available in WebOb

To manage notifications about this bug go to:
https://bugs.launchpad.net/zope2/+bug/885016/+subscriptions