Skip to content

Commit d8a88fc

Browse files
authored
Scrub PII exposed by Cloudflare proxy services
CloudFlare's proxy services are known to inject 'CF-Connecting-IP' header in the request, which contains the real IP address of the requester. This header seems to have similar functionality as 'X-Forwarded-For' and/or 'X-Real-IP'. As with X-Real-IP and X-Forwarded-For, the IP-address contained in the header is considered PII and should be scrubbed by default. See also: https://developers.cloudflare.com/fundamentals/reference/http-headers/
1 parent e67b36d commit d8a88fc

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

src/Integration/RequestIntegration.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,7 @@ final class RequestIntegration implements IntegrationInterface
5959
'Set-Cookie',
6060
'X-Forwarded-For',
6161
'X-Real-IP',
62+
'CF-Connecting-IP',
6263
];
6364

6465
/**

0 commit comments

Comments
 (0)