diff options
| author | Aymeric Augustin | 2013-10-17 20:57:38 +0200 | 
|---|---|---|
| committer | Aymeric Augustin | 2013-10-17 20:59:21 +0200 | 
| commit | 235dc76d07b3905304aefd3d4fe66b4354c3e011 (patch) | |
| tree | b135f378e0d0d18a67f937d9baafda5149de25df | |
| parent | 80dd45632aa21c667e841a1131c74e79d1518881 (diff) | |
| download | django-debug-toolbar-235dc76d07b3905304aefd3d4fe66b4354c3e011.tar.bz2 | |
Remove support for the X-Forwarded-For header.
Follow the tracks of Django where it was removed in version 1.1. The
reasons and a workaround are described here:
https://docs.djangoproject.com/en/dev/releases/1.1/#removed-setremoteaddrfromforwardedfor-middleware
Fix #338.
| -rw-r--r-- | debug_toolbar/middleware.py | 6 | 
1 files changed, 1 insertions, 5 deletions
| diff --git a/debug_toolbar/middleware.py b/debug_toolbar/middleware.py index 6512de6..0d07411 100644 --- a/debug_toolbar/middleware.py +++ b/debug_toolbar/middleware.py @@ -68,11 +68,7 @@ class DebugToolbarMiddleware(object):          if getattr(settings, 'TEST', False):              return False -        x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR', None) -        if x_forwarded_for: -            remote_addr = x_forwarded_for.split(',')[0].strip() -        else: -            remote_addr = request.META.get('REMOTE_ADDR', None) +        remote_addr = request.META.get('REMOTE_ADDR', None)          # if not internal ip, and not DEBUG          return remote_addr in settings.INTERNAL_IPS and bool(settings.DEBUG) | 
