Graham McIntire
938af4d6f2
Bandit's dual-stack listener delivers IPv4 connections to the app as IPv4-mapped IPv6 tuples (`::ffff:a.b.c.d`). The trust check compared that 128-bit form against our IPv4 trusted_proxies CIDRs and never matched, so cf-connecting-ip was ignored on every cloudflared-relayed request — every visitor logged as the cloudflared sidecar pod IP (rendered as `0:0:0:0:0:65535:2804:101` etc.). Collapses the mapped tuple to plain IPv4 before the trust check and records it that way on the conn, so logs and session storage see the real client IP that Cloudflare set in cf-connecting-ip. |
||
|---|---|---|
| .. | ||
| controllers | ||
| live | ||
| plugs | ||
| analytics_test.exs | ||
| live_table_footer_test.exs | ||
| metrics_log_suppression_test.exs | ||
| metrics_plug_test.exs | ||
| skew_t_property_test.exs | ||
| skew_t_test.exs | ||
| telemetry_test.exs | ||
| user_auth_test.exs | ||