Release status: stable
|Description||Handling of trusted proxy addresses (XFF)|
|License||GNU General Public License 2.0 or later|
|Translate the TrustedXFF extension if it is available at translatewiki.net|
|Issues||Open tasks · Report a bug|
The TrustedXFF extension maintains a list of trusted hosts in a file in a PHP array format. For details, see meta:XFF project.
The file can be generated using the generate.php maintenance script.
- Download and place the file(s) in a directory called
- Add the following code at the bottom of your
wfLoadExtension( 'TrustedXFF' );
- Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.
To users running MediaWiki 1.28 or earlier:
The instructions above describe the new way of installing this extension using
If you need to install this extension on these earlier versions (MediaWiki 1.28 and earlier), instead of
wfLoadExtension( 'TrustedXFF' );, you need to use:
- Useless where
X-Forwarded-Foris unavailable. As of 2019, many wikis force HTTPS for all things. Any manipulation with headers on a proxy compromises HTTPs server authentication unless the proxy possesses an SSL certificate authoritative for the wiki in question. It makes the extension far less useful nowadays than it was originally envisaged.
|This extension is being used on one or more Wikimedia projects. This probably means that the extension is stable and works well enough to be used by such high-traffic websites. Look for this extension's name in Wikimedia's CommonSettings.php and InitialiseSettings.php configuration files to see where it's installed. A full list of the extensions installed on a particular wiki can be seen on the wiki's Special:Version page.|