From 108b1c9d1a54fe6a356f1c0b90077ed433932d40 Mon Sep 17 00:00:00 2001 From: Gunter Chou Date: Wed, 9 Oct 2024 15:40:54 +0800 Subject: [PATCH] docs: fix configuration option for trusting forwarded IPs (#2479) --- docs/deployment.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/deployment.md b/docs/deployment.md index e1854deff..d69fcf88e 100644 --- a/docs/deployment.md +++ b/docs/deployment.md @@ -376,7 +376,7 @@ Uvicorn can use these headers to correctly set the client and protocol in the re However as anyone can set these headers you must configure which "clients" you will trust to have set them correctly. Uvicorn can be configured to trust IP Addresses (e.g. `127.0.0.1`), IP Networks (e.g. `10.100.0.0/16`), -or Literals (e.g. `/path/to/socket.sock`). When running from CLI these are configured using `--forwarded-trust-ips`. +or Literals (e.g. `/path/to/socket.sock`). When running from CLI these are configured using `--forwarded-allow-ips`. !!! Warning "Only trust clients you can actually trust!" Incorrectly trusting other clients can lead to malicious actors spoofing their apparent client address to your application.