aboutsummaryrefslogtreecommitdiffhomepage
path: root/doc/TODO.md
diff options
context:
space:
mode:
authorArthurHoaro <arthur@hoa.ro>2016-08-03 10:36:47 +0200
committerArthurHoaro <arthur@hoa.ro>2016-08-03 10:36:47 +0200
commit50d179183810a7b719bc10da2b9c4a95fd9dddee (patch)
treee669db360950025b4b6534075e940f532b0f00f3 /doc/TODO.md
parentc7a42ab1d9b21bf53cd30bc57b57789716c8711b (diff)
downloadShaarli-50d179183810a7b719bc10da2b9c4a95fd9dddee.tar.gz
Shaarli-50d179183810a7b719bc10da2b9c4a95fd9dddee.tar.zst
Shaarli-50d179183810a7b719bc10da2b9c4a95fd9dddee.zip
Add trusted IPs in config and try to ban forwarded IP on failed login
* Add a new settings (which needs to be manually set): `security.trusted_proxies` * On login failure, if the `REMOTE_ADDR` is in the trusted proxies, try to retrieve the forwarded IP in headers. * If found, the client address is added in ipbans, else we do nothing. Fixes #409
Diffstat (limited to 'doc/TODO.md')
0 files changed, 0 insertions, 0 deletions