Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(release): 6.0.0-alpha.18 [skip ci]
# [6.0.0-alpha.18](6.0.0-alpha.17...6.0.0-alpha.18) (2023-01-05) ### Bug Fixes * The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option `masterKeyIps` may be circumvented, see [GHSA-vm5r-c87r-pf6x](GHSA-vm5r-c87r-pf6x) ([#8372](#8372)) ([892040d](892040d)) ### BREAKING CHANGES * The mechanism to determine the client IP address has been rewritten; to correctly determine the IP address it is now required to set the Parse Server option `trustProxy` accordingly if Parse Server runs behind a proxy server, see the express framework's [trust proxy](https://expressjs.com/en/guide/behind-proxies.html) setting (#8372) ([892040d](892040d))
- Loading branch information