From 9191fccab3aafc09e366ec4bbd92496e310887af Mon Sep 17 00:00:00 2001 From: TaskPool Date: Mon, 27 Jul 2026 03:15:53 +0800 Subject: [PATCH] fix(router): use CIDR to trust all proxies for Host header validation --- internal/router/router.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/internal/router/router.go b/internal/router/router.go index d3a33d7..2297468 100644 --- a/internal/router/router.go +++ b/internal/router/router.go @@ -45,8 +45,9 @@ func Setup(c *Controllers) *gin.Engine { router := gin.New() // 信任所有反向代理（Docker/Nginx 场景） - // 设置为 nil 表示信任所有，避免 "invalid Host header" 错误 - router.SetTrustedProxies(nil) + // 使用 CIDR "0.0.0.0/0" 信任所有 IPv4，"::/0" 信任所有 IPv6 + // 避免 "Forbidden: invalid Host header" 错误 + router.SetTrustedProxies([]string{"0.0.0.0/0", "::/0"}) router.Use(middleware.GinLogger(), middleware.GinRecovery()) router.Use(middleware.TravelProxyMiddleware())