express-ipfilter

express-ipfilter copied to clipboard

This is the original PR #61 plus some of the feedback that was left in.

ryanbillingsley

Move default getClientIp to use proxy-addr, just like express does.

9

Includes #61 which bumps lodash version to fix security issues. Typos fixed in the readme. Removes allowedHeaders in favour of proxy-addr (to streamline with [Express behind proxies](http://expressjs.com/en/guide/behind-proxies.html)). For more info...

pdefreitas

update lodash for security issue

8

To fix this issue #60 https://snyk.io/vuln/npm:lodash:20180130

annyhe

Dependency on lodash 3, which suffers from security vulnerabilities

1

Vulnerability report: https://snyk.io/vuln/npm:lodash:20180130 Maybe lodash could be swapped out for some modern JS features? Not sure how this lib is handling potentially breaking changes however.

laurieboyes

_express/express_ does offer application-wide settings to handle proxied request by setting 'trust proxy' option: ``` app.set('trust proxy', 'loopback') // specify a single subnet app.set('trust proxy', 'loopback, 123.123.123.123') // specify a...

pdefreitas

If you like i can provide a PR with the definitions i came up with (by reverse engineering the JS code :fish:)

crunchie84