From b0d2406acd798d0554d59072151067fa20a4bac3 Mon Sep 17 00:00:00 2001 From: curo1305 Date: Thu, 4 Jun 2026 23:11:52 +0200 Subject: [PATCH] fix(06): WR-04 add 10.0.0.0/8 to trusted proxy CIDR list Add the 10.0.0.0/8 RFC-1918 block to _TRUSTED_PROXY_NETS so reverse proxies in cloud VPCs and Kubernetes clusters are recognized. Without this, X-Forwarded-For was silently ignored for any proxy on a 10.x.x.x address, logging all requests as originating from the proxy IP. Co-Authored-By: Claude Sonnet 4.6 --- backend/deps/utils.py | 1 + 1 file changed, 1 insertion(+) diff --git a/backend/deps/utils.py b/backend/deps/utils.py index fc55af4..8ec08d6 100644 --- a/backend/deps/utils.py +++ b/backend/deps/utils.py @@ -8,6 +8,7 @@ from typing import Optional from fastapi import HTTPException, Request _TRUSTED_PROXY_NETS = [ + ipaddress.ip_network("10.0.0.0/8"), ipaddress.ip_network("127.0.0.0/8"), ipaddress.ip_network("172.16.0.0/12"), ipaddress.ip_network("192.168.0.0/16"),