Zach H ea6af0048c [Server] Parse the rightmost address from forwarded header lists (#7586) ... X-Forwarded-For carries a comma-separated list, and constructing a QHostAddress from the raw header value returns a null address for it, so a configured X-Forwarded-For or a multi-hop header never resolved and websocket clients stayed on the proxy's address. - Add parseForwardedAddress, returning the rightmost usable entry of a forwarded header list - Use it for the websocket handshake instead of parsing the raw value - Exempt loopback from per-address auth rate limits so a same-host proxy with a customized trusted_sources list cannot lock every user out - Add forwarded_address_test Co-authored-by: Lukas Brübach <Bruebach.Lukas@bdosecurity.de>		2026-10-18 16:53:55 -04:00
..
docker	Docker-compose setup for Servatrice (#3887)	2020-03-16 21:40:58 -04:00
migrations	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords (#7193)	2026-10-16 22:52:26 +02:00
mysql-storage	Docker-Compose support for Windows (#3974)	2020-05-08 15:22:39 -04:00
resources	Update macOS Monterey app icon (#4805)	2023-08-06 17:46:03 -04:00
scripts	Add Discord account registration monitor (#7013)	2026-06-21 01:09:57 -04:00
src	[Server] Parse the rightmost address from forwarded header lists (#7586)	2026-10-18 16:53:55 -04:00
check_schema_version.sh	update format.sh (#6240)	2025-11-07 15:00:39 +01:00
CMakeLists.txt	[Server] Parse the rightmost address from forwarded header lists (#7586)	2026-10-18 16:53:55 -04:00
servatrice.desktop	Servatrice: open in a terminal window when started from the menu	2014-10-11 13:38:07 +02:00
servatrice.ini.example	[Server] Parse the rightmost address from forwarded header lists (#7586)	2026-10-18 16:53:55 -04:00
servatrice.qrc	Renamed resources	2014-10-07 16:49:40 +02:00
servatrice.rc	Servatrice logo	2014-10-06 21:04:37 +02:00
servatrice.sql	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords (#7193)	2026-10-16 22:52:26 +02:00