option for trustXForwardedFor

Server.go

@@ -23,6 +23,7 @@ type ServerOptions struct {
 	DataDirectory      string
 	DBPath             string
 	BandwidthLimit     int64
+	TrustXForwardedFor bool
 	ServerPublicProperties
 }
 
@@ -75,7 +76,13 @@ func (this *Server) handleAbout(w http.ResponseWriter) {
 	this.serveJsonObject(w, this.opts.ServerPublicProperties)
 }
 
-func remoteIP(r *http.Request) string {
+func (this *Server) remoteIP(r *http.Request) string {
+	if this.opts.TrustXForwardedFor {
+		if xff := r.Header.Get("X-Forwarded-For"); len(xff) > 0 {
+			return xff
+		}
+	}
+
 	return strings.TrimRight(strings.TrimRight(r.RemoteAddr, "0123456789"), ":")
 }
 

cmd/contented/main.go

@@ -18,6 +18,7 @@ func main() {
 	appTitle := flag.String("title", "contented", "Title used in web interface")
 	maxUploadMb := flag.Int("max", 8, "Maximum size of uploaded files in MiB (set zero for unlimited)")
 	maxUploadSpeed := flag.Int("speed", 0, "Maximum upload speed in bytes/sec (set zero for unlimited)")
+	trustXForwardedFor := flag.Bool("trustXForwardedFor", false, "Trust X-Forwarded-For reverse proxy headers")
 
 	flag.Parse()
 
@@ -25,6 +26,7 @@ func main() {
 		DataDirectory:      *dataDir,
 		DBPath:             *dbPath,
 		BandwidthLimit:     int64(*maxUploadSpeed),
+		TrustXForwardedFor: *trustXForwardedFor,
 		ServerPublicProperties: contented.ServerPublicProperties{
 			AppTitle:       *appTitle,
 			MaxUploadBytes: int64(*maxUploadMb) * 1024 * 1024,

upload.go

@@ -41,7 +41,7 @@ func (this *Server) handleUpload(w http.ResponseWriter, r *http.Request) {
 			return
 		}
 
-		path, err := this.handleUploadFile(f, fhs, remoteIP(r))
+		path, err := this.handleUploadFile(f, fhs, this.remoteIP(r))
 		if err != nil {
 			log.Printf("%s Upload failed: %s\n", r.RemoteAddr, err.Error())
 			http.Error(w, "Upload failed", 500)