@@ -62,15 +62,15 @@ Set `validate: {ip: false}` in the options to disable the check.
62
62
63
63
> Added in ` 6.8.0 ` .
64
64
65
- This error is logged when the trust proxy setting is set to ` true ` .
65
+ This error is logged when the ` trust proxy ` setting is set to ` true ` .
66
66
67
67
If this is set to true, it will cause express to return the leftmost entry in
68
68
the ` X-Forwarded-For ` header as the client's IP. This header could be set by the
69
69
proxy or a malicious client, opening up avenues for bypassing the rate limiter.
70
70
71
71
Refer to the
72
- [ troubleshooting proxy issues] ( https://github.com/express-rate-limit/express-rate-limit/wiki/Troubleshooting-Proxy-Issues )
73
- page for a guide to set the ` trust proxy ` value correctly.
72
+ [ troubleshooting proxy issues] ( /guides/troubleshooting-proxy-issues ) page for a
73
+ guide to set the ` trust proxy ` value correctly.
74
74
75
75
This check will be prevented if a custom ` keyGenerator ` is supplied.
76
76
@@ -81,12 +81,12 @@ Set `validate: {trustProxy: false}` in the options to disable the check.
81
81
> Added in ` 6.8.0 ` .
82
82
83
83
This error is logged when the ` X-Forwarded-For ` header is set (indicating use of
84
- a proxy), but the trust proxy setting is ` false ` (which is the default value).
84
+ a proxy), but the ` trust proxy ` setting is ` false ` (which is the default value).
85
85
86
86
This usually indicates a configuration issue that will cause express-rate-limit
87
87
to apply it's limits global rather than on a per-user basis. Refer to the
88
- [ troubleshooting proxy issues] ( https://github.com/express-rate-limit/express-rate-limit/wiki/Troubleshooting-Proxy-Issues )
89
- page for a guide to set the ` trust proxy ` value correctly.
88
+ [ troubleshooting proxy issues] ( /guides/troubleshooting-proxy-issues ) page for a
89
+ guide to set the ` trust proxy ` value correctly.
90
90
91
91
If this error occurs only rarely, and you do not have a reverse proxy, it may
92
92
indicate a malicious user probing for vulnerabilities.
0 commit comments