fiber

mirror of https://github.com/zap-proto/fiber.git synced 2026-10-30 15:06:23 +00:00

Files

T

History

terraincognita07 1fb0471966 fix(proxy): overwrite X-Real-IP in BalancerForward (GHSA-gcfq-8gqf-4876)

Backport of the v3 fix (72455dd, PR #4260) for GHSA-gcfq-8gqf-4876 /
CVE-2026-45045 to the v2 branch: Header.Add kept an attacker-supplied
X-Real-IP as the first header value, so upstream servers reading the
first value trusted the spoofed IP. Header.Set overwrites it with the
real client IP (c.IP()).

Adds the corresponding regression test adapted to v2's *fiber.Ctx
handler signature, and fixes the same insecure pattern in the proxy
middleware doc example.

2026-07-03 15:42:07 +02:00

middleware

fix(proxy): overwrite X-Real-IP in BalancerForward (GHSA-gcfq-8gqf-4876)

2026-07-03 15:42:07 +02:00

_category_.json

📝 docs: automated synchronization with gofiber/docs (#2344 )

2023-02-25 10:29:07 +01:00

app.md

✨ feat: add liveness and readiness checks (#2509 )

2024-01-03 18:13:58 +01:00

client.md

fix md syntax