nextcloud / nextcloud/notify_push

should canonicalize IPv6 before testing trusted_proxies

Open
#184 0 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
Rust
Stars
344
Forks
64
Avg merge
2d 10h
Merged PRs (30d)
5

Description

oc notify_push:setup fails when trusted_proxies is not in exactly the same string received in http headers. For instance x:y:z::e is treated as different as x:y:z:0::e

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the oc notify_push:setup handling for trusted_proxies and trace where proxy addresses from HTTP headers are compared. Verify the IPv6 parsing or normalization path, then confirm that equivalent IPv6 forms such as x:y:z::e and x:y:z:0::e are treated as the same trusted proxy.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
backend, networking
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.