Affected by GO-2026-6015 and 2 other vulnerabilities

GO-2026-6015: Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS in github.com/zalando/skipper

GO-2026-6018: Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication in github.com/zalando/skipper

GO-2026-6019: Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies in github.com/zalando/skipper

xforward

package

v0.26.21 Latest Latest Go to latest Published: Jun 5, 2026 License: Apache-2.0, MIT Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/zalando/skipper

Links

Open Source Insights

Documentation ¶

Overview ¶

Package xforward provides filters to change XFF headers.

Constants ¶

View Source

const (
	// Deprecated, use filters.XforwardName instead
	Name = filters.XforwardName

	// Deprecated, use filters.XforwardFirstName instead
	NameFirst = filters.XforwardFirstName
)

Variables ¶

This section is empty.

Functions ¶

func New ¶

func New() filters.Spec

New creates a specification for the xforward filter that appends the remote IP of the incoming request to the X-Forwarded-For header, and sets the X-Forwarded-Host header to the value of the incoming request's Host header.

func NewFirst ¶

func NewFirst() filters.Spec

NewFirst creates a specification for the xforwardFirst filter that prepends the remote IP of the incoming request to the X-Forwarded-For header, and sets the X-Forwarded-Host header to the value of the incoming request's Host header.

Types ¶

This section is empty.

Source Files ¶

View all Source files

xforward.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL