1
0
Fork 0
mirror of https://github.com/actix/actix-web.git synced 2024-07-01 19:47:18 +00:00
Actix Web is a powerful, pragmatic, and extremely fast web framework for Rust.
Go to file
pando85 4fc99d4a6f
Fix audit issue logging by default peer address (#1485)
* Fix audit issue logging by default peer address

By default log format include remote address that is taken from headers.
This is very easy to replace making log untrusted.

Changing default log format value `%a` to peer address we are getting
this trusted data always. Also, remote address option is maintianed and
relegated to `%{r}a` value.

Related  kanidm/kanidm#191.

* Rename peer/remote to remote_addr/realip_remote_addr

Change names to avoid naming confusions. I choose this accord to Nginx
variables and
[ngx_http_realip_module](https://nginx.org/en/docs/http/ngx_http_realip_module.html).

Add more specific documentation about security concerns of using Real IP
in logger.

* Rename security advertise header in doc

* Add fix audit issue logging by default peer adress to changelog

Co-authored-by: Rob Ede <robjtede@icloud.com>
2020-05-15 09:07:27 +09:00
.github bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
actix-cors Add notes to READMEs 2020-03-12 07:57:38 +09:00
actix-files bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
actix-framed bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
actix-http bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
actix-identity Add notes to READMEs 2020-03-12 07:57:38 +09:00
actix-multipart bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
actix-session Add notes to READMEs 2020-03-12 07:57:38 +09:00
actix-web-actors bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
actix-web-codegen bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
awc bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
benches Add benchmark for full stack request lifecycle (#1298) 2020-01-25 08:05:25 +09:00
examples Fix/suppress warnings 2020-02-08 02:20:01 +09:00
src Fix audit issue logging by default peer address (#1485) 2020-05-15 09:07:27 +09:00
test-server bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
tests Fix clippy warnings 2020-03-12 00:52:21 -03:00
.appveyor.yml update deps 2018-10-08 21:58:37 -07:00
.gitignore start working on guide 2017-11-27 16:41:37 -08:00
Cargo.toml allow parent data containers to be accessed from child scopes 2020-05-09 00:31:26 +01:00
CHANGES.md Fix audit issue logging by default peer address (#1485) 2020-05-15 09:07:27 +09:00
CODE_OF_CONDUCT.md code of conduct 2018-01-21 15:29:02 -08:00
codecov.yml Remove codecoverage for tests and examples (#1299) 2020-01-24 05:10:02 +09:00
LICENSE-APACHE add mit license 2017-12-17 10:08:44 -08:00
LICENSE-MIT spelling check 2018-03-24 09:35:52 +03:00
MIGRATION.md Fix typos in MIGRATION.md (#1470) 2020-04-23 03:39:09 +09:00
README.md bump msrv in ci and readme 2020-05-13 01:57:37 +01:00
rustfmt.toml copy actix-web2 2019-03-01 22:51:32 -08:00

Actix web

Actix web is a small, pragmatic, and extremely fast rust web framework

Build Status codecov crates.io Join the chat at https://gitter.im/actix/actix Documentation Download Version License

Website | Chat | Examples


Actix web is a simple, pragmatic and extremely fast web framework for Rust.

  • Supported HTTP/1.x and HTTP/2.0 protocols
  • Streaming and pipelining
  • Keep-alive and slow requests handling
  • Client/server WebSockets support
  • Transparent content compression/decompression (br, gzip, deflate)
  • Configurable request routing
  • Multipart streams
  • Static assets
  • SSL support with OpenSSL or Rustls
  • Middlewares (Logger, Session, CORS, etc)
  • Includes an asynchronous HTTP client
  • Supports Actix actor framework
  • Supports Rust 1.40+

Docs

Example

Dependencies:

[dependencies]
actix-web = "2"
actix-rt = "1"

Code:

use actix_web::{get, web, App, HttpServer, Responder};

#[get("/{id}/{name}/index.html")]
async fn index(info: web::Path<(u32, String)>) -> impl Responder {
    format!("Hello {}! id:{}", info.1, info.0)
}

#[actix_rt::main]
async fn main() -> std::io::Result<()> {
    HttpServer::new(|| App::new().service(index))
        .bind("127.0.0.1:8080")?
        .run()
        .await
}

More examples

You may consider checking out this directory for more examples.

Benchmarks

License

This project is licensed under either of

at your option.

Code of Conduct

Contribution to the actix-web crate is organized under the terms of the Contributor Covenant, the maintainer of actix-web, @fafhrd91, promises to intervene to uphold that code of conduct.