log

age author description
Sun, 09 May 2021 22:40:56 +0200 Mads Kiilerich auth: only use X- headers instead of wsgi.url_scheme if explicitly told so in url_scheme_header - drop https_fixup setting
Sun, 09 May 2021 22:34:02 +0200 Mads Kiilerich auth: only use X- headers instead of REMOTE_ADDR if explicitly told so in remote_addr_header
Sun, 09 May 2021 22:32:51 +0200 Mads Kiilerich auth: don't trust clients too much - only trust the *last* IP in the X-Forwarded-For header