5 ms·
Side note, don't use XFF if you have any option not to. The "Forwarded" header is much nicer.
by Avamander 1y ago
Side note, don't use XFF if you have any option not to. The "Forwarded" header is much nicer.
- OutOfHere 1y agoThe XFF header is set a lot more commonly, and this gives the app the freedom to be implicitly compatible with a lot more reverse proxy servers than the Forwarded header without needing special configuration. Moreover, the Forwarded header has all the security pitfalls of the XFF header.