From 235dc76d07b3905304aefd3d4fe66b4354c3e011 Mon Sep 17 00:00:00 2001 From: Aymeric Augustin Date: Thu, 17 Oct 2013 20:57:38 +0200 Subject: Remove support for the X-Forwarded-For header. Follow the tracks of Django where it was removed in version 1.1. The reasons and a workaround are described here: https://docs.djangoproject.com/en/dev/releases/1.1/#removed-setremoteaddrfromforwardedfor-middleware Fix #338. --- debug_toolbar/middleware.py | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/debug_toolbar/middleware.py b/debug_toolbar/middleware.py index 6512de6..0d07411 100644 --- a/debug_toolbar/middleware.py +++ b/debug_toolbar/middleware.py @@ -68,11 +68,7 @@ class DebugToolbarMiddleware(object): if getattr(settings, 'TEST', False): return False - x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR', None) - if x_forwarded_for: - remote_addr = x_forwarded_for.split(',')[0].strip() - else: - remote_addr = request.META.get('REMOTE_ADDR', None) + remote_addr = request.META.get('REMOTE_ADDR', None) # if not internal ip, and not DEBUG return remote_addr in settings.INTERNAL_IPS and bool(settings.DEBUG) -- cgit v1.2.3