rest: gin: Don'trust all proxies

This follows the recommendation from https://github.com/gin-gonic/gin/blob/master/docs/doc.md#dont-trust-all-proxies Signed-off-by: Christophe Fergeau <[email protected]>
crc-org · Feb 16, 2024 · 7fad3ea · 7fad3ea
1 parent b20e58c
commit 7fad3ea
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/pkg/config/json.go b/pkg/config/json.go
@@ -241,7 +241,7 @@ func (bootloader *LinuxBootloader) MarshalJSON() ([]byte, error) {
 
 type virtioNetForMarshalling struct {
 	VirtioNet
-	MacAddress string `json:"macAddress"`
+	MacAddress string `json:"macAddress,omitempty"`
 }
 
 func (dev *VirtioNet) MarshalJSON() ([]byte, error) {

diff --git a/pkg/rest/rest.go b/pkg/rest/rest.go
@@ -87,6 +87,10 @@ func NewServer(inspector VirtualMachineInspector, stateHandler VirtualMachineSta
 	if err != nil {
 		return nil, err
 	}
+	err = r.SetTrustedProxies(nil)
+	if err != nil {
+		return nil, err
+	}
 	s := VFKitService{
 		router:   r,
 		Endpoint: ep,