Not a bug Cloudflare IP addresses in XF\Http\Request are outdated

[PaulB]

Affected version

2.2.4

XF\Http\Request contains 104.16.0.0/12 as a Cloudflare IP address. Cloudflare is reallocating part of 104.16.0.0/12 for use by WARP and Gateway, meaning that it will soon serve untrusted traffic. The following changes should be made prior to May 7:

• Remove 104.16.0.0/12
• Add 104.16.0.0/13
• Add 104.24.0.0/14

This effectively subtracts 104.28.0.0/14 from 104.16.0.0/12.

It's probably worth checking that there aren't any other changes missing from the list in Request; this is only the latest change.

 

[Chris D]

No need for bug reports for this.

We automatically update these before every release so these will be picked up before we build the 2.2.5 release. I've confirmed that those changes come through.

 

[PaulB]

Good to know! One less thing I need to monitor.