Make Koa's proxy support safe for applications that sit behind a known chain of reverse proxies.
Make Koa's proxy support safe for applications that sit behind a known chain of reverse proxies.: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). Today app.proxy is only an all-or-nothing boolean, so enabling it trusts every value in X-Forwarded-For, including values a…
The task
Today app.proxy is only an all-or-nothing boolean, so enabling it trusts every value in X-Forwarded-For, including values a client may have inserted before the first proxy controlled by the application. Keep the existing app.proxy = false and app.proxy = true modes, and…
Part of XiaomiMiMo/MiMo-V2.6-RL-oss.