test-ready
authorken <ken@kengrimes.com>
Sun, 9 Jul 2017 23:03:04 +0000 (23:03 +0000)
committerken <ken@kengrimes.com>
Sun, 9 Jul 2017 23:03:04 +0000 (23:03 +0000)
router.js

index da11e8a..9d283f6 100644 (file)
--- a/router.js
+++ b/router.js
@@ -129,6 +129,7 @@ exports = {
           htArgv[0] = htArgv[0].slice(1)
         this.serveBind(response, route.bind, htArgv)
       }
+      //TODO: auth better than this (ip spoofing is easy)
       else if (route.host == (request.headers['x-forwarded-for'] ||
                          request.connection.remoteAddress))
         this.serveHost(response, route, htArgv)