mirror of
https://github.com/google/nomulus.git
synced 2025-07-27 04:58:37 +02:00
9b79f5af2c
For reasons unclear at this point, Java 17's servlet implementation on GAE injects IP addresses (including unroutable private IPs) into the standard X-Forwarded-For header, which we currently use to embed registrar IP addresses to check against the allow list. This results in the server not properly parsing the header and rejecting legitimate connections. This PR sets a custom header that should not be interfered with by any JVM implementation to store the IP address, while maintaining the old header as a fallback. The proxy will set both headers to allow the server to gracefully migrate from Java 8 and Java 17 (and potentially rollback). Also removed some headers and logic that are not used. |
||
|---|---|---|
| .. | ||
| kubernetes | ||
| src | ||
| terraform | ||
| .gitignore | ||
| build.gradle | ||
| buildscript-gradle.lockfile | ||
| deploy-proxy-for-env.sh | ||
| Dockerfile | ||
| gradle.lockfile | ||