Review "IP address has changed" functionality
Author: bcolesCreated Apr 15, 2023Updated Apr 22, 2023
LabelsDefectLow
The "IP address has changed" functionality is dodgy. Worse, when allow_reverse_proxy is used, the X-Forwarded-For header is trusted implicitly without validation.
Here's an example someone provided, showing that the stored IP address contains two IP addresses separated by ,.

It may also result in many "IP address has changed" events in load balanced environments. Although I'm not sure that this is avoidable.
Source: beefproject/beef