tree a90a526d042f0ada138a671b1df5b2d623f5308a
parent ede084a1469385e1d8aec38d9eef2d501a6d3350
author Cecylia Bocovich <cohosh@torproject.org> 1628803745 -0400
committer meskio <meskio@torproject.org> 1629825859 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEs7M6f/ZpXzXMAQR+Urj1rJei2oYFAmElK0UACgkQUrj1rJei
 2oZ+ehAAkfbSDjQGOWrJ/tp6w/jfdiiM418VR625bprsy6HqxjCqJ90NRdhXyt2s
 hS9FWrbEGpCGACxmEpQwX+5DU327k3rR8KAxFX7N2KJKY9q8ZGJKgXP64+/R062t
 Q8ECmhXTR8dErvJ/KH+JucHoXA6jYCN1Yxbu9m1+Ti4dzh7vfCE08r18jh/VHsSs
 DYDSjV6A/gc9giEYMOx8OZ+s3E2MVbpSBZVXF/HaPaj2lbmBkxfNAy5+3t0/yv6s
 L5wnasG7eLs0unh2sIFs6YfSgfHqVkZTfHm15q3EwiZsPjbVcA1nUGDWx+6tjfnp
 sHD+mj2jLaFIeKkfOdezwjbApE1D+1xEHhozE3dcq3rZjF2R2x9WHhEloHlLIX06
 mwcRpjORSt6h2xM2q8YeQoSp94Q14qegcxmKhzPFFG1eT3hVVzyz8ZGgQAoCnVam
 DOe/tX03Eds1a5nGcfM0E7eYKfhMc/+N9wQ3Q3SfzlTJQ7l6kPJUwEkOD0LFKVDo
 Ld7t1qfwE9SYzAxDffU3butzSkqv7eOLlQnIGq8hbRwSJxSgjYO4TSjGbAU51Eyj
 jIeNcmw11DJaknbj3si6Vlt10UOh2ltQmRoIuQ1YqBA0iVQVF+DukRpY6XC8zgxI
 wWFkNlqfk0Phju73WHlqdcQyq4y+t05AAACLl53SdTsUONj7V9U=
 =Gc8t
 -----END PGP SIGNATURE-----

Parse X-Forwarded-For addresses from left to right

This parses X-Forwarded-For addresses from left to right since with the
domain fronting at moat we may have more than one external proxy
address. getClientIP is also updated to skip not only loopback addresses
but any non-valid address (such as private addresses) that may have been
in the header.