Closed
Description
Symfony version(s) affected
>=2.8.42
Introduced by 18f55fe
Description
When trusted proxies are configured including a subnet a subrequest initiated by the InlineFragmentRenderer will contain an invalid REMOTE_ADDR server variable.
How to reproduce
- Add a trusted proxy with subnet to the application, like
127.0.0.1/24. - Initiate a sub request using the
InlineFragmentRenderer
Possible Solution
Inspect the trusted proxy for the '/' character and make sure only the first part is used.
Additional context
n/a