WebStyle: new CFG_WEBSTYLE_REVERSE_PROXY_IPS
- In a multinode configuration with an HTTP reverse proxy node sitting in front of worker nodes that may also be available on public Internet, it is possible to forge HTTP headers in order to spoof IP address. By correctly setting the new variable CFG_WEBSTYLE_REVERSE_PROXY_IPS, the worker nodes will read forwarded IP addresses only if the actual request is coming from the recognized reverse proxy nodes.
Co-authored-by: Tibor Simko <tibor.simko@cern.ch>