Jamal Kamaladdinoglu 2bb901d9c4 Accept a trusted proxy address given without a subnet (#9301) ...

TRUSTED_PROXY=192.168.1.1 is ignored and only 192.168.1.1/32 is honoured. checkCIDR() splits the range on the slash and rejects the value when the mask part is missing, so an address written without a subnet never matches.

An address without a subnet is now read as a single host: /32 for IPv4 and /128 for IPv6. That is the format docs/en/admins/09_AccessControl.md points at.

Host names such as gateway.localdomain are still not resolved.

tests/app/Utils/httpUtilTest.php gains 16 cases for checkCIDR, two of which fail without this change.

Refs #9210

2026-09-13 22:34:39 +02:00

..

dotNotationUtilTest.php

Minor explicit namespace fix for PHPUnit (#7960)

2025-09-14 21:27:55 +02:00

httpUtilTest.php

Accept a trusted proxy address given without a subnet (#9301)

2026-09-13 22:34:39 +02:00

passwordUtilTest.php

Minor explicit namespace fix for PHPUnit (#7960)

2025-09-14 21:27:55 +02:00