[zope2-tracker] [Bug 885016] [NEW] Trusted Proxies not available in WebOb

Matthew Wilkes 885016 at bugs.launchpad.net
Wed Nov 2 00:14:38 UTC 2011

Public bug reported:

WebOb will, by default, trust the first X-FORWARDED-FOR header, if set.
This is a regression compared to Zope 2.x's Trusted Proxies.

We need a WSGI Middleware that implements the trusted support, so if a
proxy is untrusted the REMOTE_ADDR needs to either be added to the start
of the X-FORWARDED-FOR if not there, or the X-FORWARDED-FOR header

** Affects: zope2
     Importance: Undecided
     Assignee: Matthew Wilkes (matthew-matthewwilkes)
         Status: New

** Tags: webob zope4

** Changed in: zope2
     Assignee: (unassigned) => Matthew Wilkes (matthew-matthewwilkes)

You received this bug notification because you are a member of Zope 2
Developers, which is subscribed to Zope 2.

  Trusted Proxies not available in WebOb

To manage notifications about this bug go to:

More information about the zope2-tracker mailing list