skip to content

detached 7fff706

refactor: reuse trusted-or-local helper in HTTPS redirect

commit: 7fff7060ce2ff19e820fb553ddd9d993995f0d2e
author: brice · 6mo ago · 2026-04-01 12:32 UTC
parent: 6521b77
signature: GPG VerifiedCD88F9E564E0102646FB6077A1A07C7C7C3E349D · arch-gpg Verified for the committer email

1 file · +1 -1

M internal/adapters/in/http/middleware/cidr.go +1 -1


@@ -122,7 +122,7 @@ func HTTPSRedirect(proxyNets []*net.IPNet, httpPort, tlsPort int, forceAll bool,
122	122		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
123	123		if !forceAll {
124	124		remoteIP := ExtractRemoteIP(r.RemoteAddr)
125		-	if IsTrustedProxy(remoteIP, localhostNets) \|\| IsTrustedProxy(remoteIP, proxyNets) {
	125	+	if IsTrustedOrLocal(remoteIP, proxyNets) {
126	126		next.ServeHTTP(w, r)
127	127		return
128	128		}


@@ -122,7 +122,7 @@ func HTTPSRedirect(proxyNets []*net.IPNet, httpPort, tlsPort int, forceAll bool,
122		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {	122		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
123		if !forceAll {	123		if !forceAll {
124		remoteIP := ExtractRemoteIP(r.RemoteAddr)	124		remoteIP := ExtractRemoteIP(r.RemoteAddr)
125	-	if IsTrustedProxy(remoteIP, localhostNets) \|\| IsTrustedProxy(remoteIP, proxyNets) {	125	+	if IsTrustedOrLocal(remoteIP, proxyNets) {
126		next.ServeHTTP(w, r)	126		next.ServeHTTP(w, r)
127		return	127		return
128		}	128		}