Disable X-Forwarded-For evaluation (WE ARE THE PROXY)

lyind · May 13, 2017 · e7f9875 · e7f9875
1 parent 879099a
commit e7f9875
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/.idea/vcs.xml b/.idea/vcs.xml
diff --git a/src/main/java/net/talpidae/viceroy/ViceroyApplication.java b/src/main/java/net/talpidae/viceroy/ViceroyApplication.java
@@ -71,13 +71,16 @@ public void run()
         // disable jersey framework (we are just a proxy, for now)
         serverConfig.setJerseyResourcePackages(new String[0]);
 
-        val proxyHandler = new CanonicalPathHandler(new ProxyHandler(proxyClient, 30000, ResponseCodeHandler.HANDLE_404));
-        serverConfig.getAdditionalHandlers().add(proxyHandler);
+        // proxying is all we do
+        serverConfig.setRootHandlerWrapper(handler -> new CanonicalPathHandler(new ProxyHandler(proxyClient, 30000, ResponseCodeHandler.HANDLE_404)));
 
         // TODO Config SSL certs
         // TODO Make this configurable via command line (--server.port)
         serverConfig.setPort(443);
 
+        // make sure we don't accept X-Forwarded-For and such headers
+        serverConfig.setBehindProxy(false);
+
         try
         {
             server.start();