Cam Proudlock 2fda94f67a Forward real client IPs through waitress trusted-proxy flags ...

The X-Forwarded-For rewrite rule alone is not enough: waitress 2+
strips forwarded headers from untrusted proxies by default, so the app
still saw 127.0.0.1 with the rule active. Trust the loopback proxy and
consume x-forwarded-for on the waitress command line.

2026-07-16 15:27:45 -04:00

3.4 KiB

Raw Blame History

View Raw