avoid dead loop of forwardings

kkxx6006 · Mar 11, 2020 · ffcb3b5 · ffcb3b5
1 parent c32dfbf
commit ffcb3b5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Proxy.js b/Proxy.js
@@ -298,8 +298,10 @@ let Proxy = ({urlModify, httpprefix, serverName, port, cookieDomainRewrite, loca
         let myRe = new RegExp(`/${httpprefix}/${serverName}.*?/`, 'g') // match group
         req.url = req.url.replace(myRe, '/')
 
+        let fwdStr = req.headers['X-Forwarded-For'] || req.headers['x-forwarded-for']
+
         let {host, httpType} = getHostFromReq(req)
-        if (host == '' || host.indexOf('.') === -1) {
+        if (host == '' || host.indexOf('.') === -1 || (fwdStr && fwdStr.split(',').length > 3)) { // too many forwardings
             res.status(404).send("{}")
             return
         }