X-Git-Url: https://git.heureux-cyclage.org/?p=lhc%2Fweb%2Fwiklou.git;a=blobdiff_plain;f=includes%2FWebRequest.php;h=0065135ae01087690e28f5729102b7bb3434136f;hp=a5ae4612c6569633b5c74dc7c97e2d0efccf5f6c;hb=f43fa6f4f0e2cb60b8543daad661b48a3e0653a9;hpb=97e35fa1c6b25bac181d1a32a5d4da23f68e159c diff --git a/includes/WebRequest.php b/includes/WebRequest.php index a5ae4612c6..0065135ae0 100644 --- a/includes/WebRequest.php +++ b/includes/WebRequest.php @@ -23,6 +23,7 @@ * @file */ +use MediaWiki\MediaWikiServices; use MediaWiki\Session\Session; use MediaWiki\Session\SessionId; use MediaWiki\Session\SessionManager; @@ -1222,7 +1223,8 @@ HTML; # Append XFF $forwardedFor = $this->getHeader( 'X-Forwarded-For' ); if ( $forwardedFor !== false ) { - $isConfigured = IP::isConfiguredProxy( $ip ); + $proxyLookup = MediaWikiServices::getInstance()->getProxyLookup(); + $isConfigured = $proxyLookup->isConfiguredProxy( $ip ); $ipchain = array_map( 'trim', explode( ',', $forwardedFor ) ); $ipchain = array_reverse( $ipchain ); array_unshift( $ipchain, $ip ); @@ -1235,14 +1237,14 @@ HTML; foreach ( $ipchain as $i => $curIP ) { $curIP = IP::sanitizeIP( IP::canonicalize( $curIP ) ); if ( !$curIP || !isset( $ipchain[$i + 1] ) || $ipchain[$i + 1] === 'unknown' - || !IP::isTrustedProxy( $curIP ) + || !$proxyLookup->isTrustedProxy( $curIP ) ) { break; // IP is not valid/trusted or does not point to anything } if ( IP::isPublic( $ipchain[$i + 1] ) || $wgUsePrivateIPs || - IP::isConfiguredProxy( $curIP ) // bug 48919; treat IP as sane + $proxyLookup->isConfiguredProxy( $curIP ) // bug 48919; treat IP as sane ) { // Follow the next IP according to the proxy $nextIP = IP::canonicalize( $ipchain[$i + 1] );