Skip to content

GitLab

Open
Created by Igor Ponomarev@igo95862Contributor
Report abuse

Fix worker auto-registration being triggerable by outside clients

Only use X-Forwarded-For is Django setting USE_X_FORWARDED_HOST is enabled. This setting should be enabled by admins if LAVA webserver is behind HTTP proxy.

Only use REMOTE_ADDR if no reverse proxy was used. This is detected looking for X-Forwarded-For and Forwarded HTTP headers.

Fixes #600