4 ms·
A lot of people just verify that X-Forwarded-For matches a Cloudflare-owned IP. As this post demonstrates, you need to verify against the cloudflare origin pul
by daurnimator 6y ago
A lot of people just verify that X-Forwarded-For matches a Cloudflare-owned IP.
As this post demonstrates, you need to verify against the cloudflare origin pull CA (see https://support.cloudflare.com/hc/en-us/articles/204899617-Authenticated-Origin-Pulls https://support.cloudflare.com/hc/en-us/articles/204899617-A... )