Extension:TrustedXFF
 Release status: stable |
|
|---|---|
| Description | Handling of trusted proxy addresses (XFF) |
| Author(s) | Tim Starlingtalk |
| Latest version | 2.0.0 |
| MediaWiki | >= 1.43 |
| License | GNU General Public License 2.0 or later |
| Download | |
| Example | mediawiki.org |
| Quarterly downloads | 5 (Ranked 129th) |
| Public wikis using | 868 (Ranked 275th) |
| Translate the TrustedXFF extension if it is available at translatewiki.net | |
| Issues | Open tasks · Report a bug |
The TrustedXFF extension maintains a list of trusted hosts in a file in a PHP array format. For details, see meta:XFF project.
The file can be generated using the generate.php maintenance script.
Installation
[edit]- Download and move the extracted
TrustedXFFfolder to yourextensions/directory.
Developers and code contributors should install the extension from Git instead, using:cd extensions/
git clone https://gerrit.wikimedia.org/r/mediawiki/extensions/TrustedXFF - Add the following code at the bottom of your LocalSettings.php file:
wfLoadExtension( 'TrustedXFF' );
Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.
Limitations
[edit]- Useless where
X-Forwarded-Foris unavailable. As of 2019, many wikis force HTTPS for all things. Any manipulation with headers on a proxy compromises HTTPs server authentication unless the proxy possesses an SSL certificate authoritative for the wiki in question. It makes the extension far less useful nowadays than it was originally envisaged.
See also
[edit] | This extension is being used on one or more Wikimedia projects. This probably means that the extension is stable and works well enough to be used by such high-traffic websites. Look for this extension's name in Wikimedia's CommonSettings.php and InitialiseSettings.php configuration files to see where it's installed. A full list of the extensions installed on a particular wiki can be seen on the wiki's Special:Version page. |