Revert "feat: add env var for additional trusted proxy IPs/subnets"

Author: mendhak

README.md

@@ -19,7 +19,6 @@ This image is executed as non root by default and is fully compliant with Kubern
 - [Basic Usage](#basic-usage)
 - [Choose your ports](#choose-your-ports)
 - [Use your own certificates](#use-your-own-certificates)
-- [Trust additional proxy IPs](#trust-additional-proxy-ips)
 - [Decode JWT header](#decode-jwt-header)
 - [Disable ExpressJS log lines](#disable-expressjs-log-lines)
 - [Do not log specific path](#do-not-log-specific-path)
@@ -97,13 +96,6 @@ You can use volume mounting to substitute the certificate and private key with y
 You can use the environment variables `HTTPS_CERT_FILE` and `HTTPS_KEY_FILE` to define the location of existing certificate and private key inside container.
 
 
-## Trust additional proxy IPs
-
-By default, Express is configured to trust forwarded proxy headers from loopback, link-local, and private IP ranges. To also trust additional proxy IPs or subnets, set `ADDITIONAL_TRUSTED_PROXIES` to a single value or a comma-separated list.
-
-    docker run -e ADDITIONAL_TRUSTED_PROXIES="2001:db8::/32,203.0.113.10" -p 8080:8080 -p 8443:8443 --rm -t mendhak/http-https-echo:40
-
-
 ## Decode JWT header
 
 If you specify the header that contains the JWT, the echo output will contain the decoded JWT.  Use the `JWT_HEADER` environment variable for this.

index.js

@@ -17,18 +17,11 @@ const {
   PROMETHEUS_WITH_METHOD = 'true',
   PROMETHEUS_WITH_STATUS = 'true',
   PROMETHEUS_METRIC_TYPE = 'summary',
-  MAX_HEADER_SIZE = 1048576,
-  ADDITIONAL_TRUSTED_PROXIES
+  MAX_HEADER_SIZE = 1048576
 } = process.env
 
 const maxHeaderSize = parseInt(MAX_HEADER_SIZE, 10) || 1048576;
 
-const trustProxy = [
-  'loopback',
-  'linklocal',
-  'uniquelocal',
-  ...(ADDITIONAL_TRUSTED_PROXIES || '').split(',').map(proxy => proxy.trim()).filter(Boolean)
-];
 
 const sleep = promisify(setTimeout);
 const metricsMiddleware = promBundle({
@@ -41,7 +34,7 @@ const metricsMiddleware = promBundle({
 
 const app = express()
 app.set('json spaces', 2);
-app.set('trust proxy', trustProxy);
+app.set('trust proxy', ['loopback', 'linklocal', 'uniquelocal']);
 
 if(PROMETHEUS_ENABLED === 'true') {
   app.use(metricsMiddleware);

tests.sh

@@ -237,22 +237,6 @@ fi
 message " Stop containers "
 stop_and_remove
 
-message " Start container with additional trusted proxies "
-docker run -d --rm -e ADDITIONAL_TRUSTED_PROXIES="2001:db8::/32,198.51.100.0/24" --name http-echo-tests -p 8080:8080 -p 8443:8443 -t mendhak/http-https-echo:testing
-wait_for_ready
-
-REQUEST=$(curl -s -H "X-Forwarded-For: 203.0.113.10, 198.51.100.1, 2001:db8::1" http://localhost:8080/)
-if [[ "$(echo "$REQUEST" | jq -r '.ip')" == '203.0.113.10' ]]; then
-    passed "Additional trusted proxies passed."
-else
-    failed "Additional trusted proxies failed."
-    echo "$REQUEST" | jq
-    exit 1
-fi
-
-message " Stop containers "
-stop_and_remove
-
 message " Start container with different internal ports "
 docker run -d --rm -e HTTP_PORT=8888 -e HTTPS_PORT=9999 --name http-echo-tests -p 8080:8888 -p 8443:9999 -t mendhak/http-https-echo:testing
 wait_for_ready