Merge pull request #2694 from vitorbaptista/patch-1

Trust proxies in local IPs
2017-10-27 15:07:59 +01:00
parent e2b73e7bd4 981b440412
commit 9b5ec771f9
1 changed files with 7 additions and 1 deletions
--- a/config/trustedproxy.php
+++ b/config/trustedproxy.php
@@ -23,7 +23,7 @@ return [
    | within TrustedProxy to trust any proxy; a requirement when you cannot
    | know the address of your proxy (e.g. if using Rackspace balancers).
    |
-    | By default, we are trusting CloudFlare only.
+    | By default, we are trusting local IPs and CloudFlare only.
    |
    */

@@ -50,6 +50,12 @@ return [
        '2803:f800::/32',
        '2c0f:f248::/32',
        '2a06:98c0::/29',
+
+        // Local IPs
+        '10.0.0.0/8',
+        '172.16.0.0/12',
+        '192.168.0.0/16',
+        'fc00::/7',
    ],

    /*