Correctly parse x-forwarded-for header.

ministryofjustice · Dec 6, 2024 · 8198fd3 · 8198fd3
1 parent 8fc950c
commit 8198fd3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/conf/node/server.js b/conf/node/server.js
@@ -76,7 +76,7 @@ app.post("/spider", function (req, res) {
 
 app.get("/access-archive", async function (req, res, next) {
   try {
-    const clientIp = req.headers["x-forwarded-for"] || req.ip;
+    const clientIp = req.headers["x-forwarded-for"]?.split(',')[0];
 
     // Get the current domain from the request
     const appUrl = new URL(
@@ -105,8 +105,6 @@ app.get("/access-archive", async function (req, res, next) {
       });
     });
 
-    // http://app.archive.intranet.docker/access-archive
-
     // Redirect to the CDN URL.
     res.redirect(cdnUrl.origin);
   } catch (err) {

diff --git a/deploy/development/stateful-set.tpl.yml b/deploy/development/stateful-set.tpl.yml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: ${KUBE_NAMESPACE}
 spec:
-  replicas: 1
+  replicas: 2
   revisionHistoryLimit: 5
   selector:
     matchLabels: