{"action":"opened","issue":{"url":"https://api.github.com/repos/spring-projects/spring-boot/issues/3782","labels_url":"https://api.github.com/repos/spring-projects/spring-boot/issues/3782/labels{/name}","comments_url":"https://api.github.com/repos/spring-projects/spring-boot/issues/3782/comments","events_url":"https://api.github.com/repos/spring-projects/spring-boot/issues/3782/events","html_url":"https://github.com/spring-projects/spring-boot/issues/3782","id":101910560,"number":3782,"title":"Enable RemoteIpValve by default","user":{"login":"dsyer","id":124075,"avatar_url":"https://avatars.githubusercontent.com/u/124075?v=3","gravatar_id":"","url":"https://api.github.com/users/dsyer","html_url":"https://github.com/dsyer","followers_url":"https://api.github.com/users/dsyer/followers","following_url":"https://api.github.com/users/dsyer/following{/other_user}","gists_url":"https://api.github.com/users/dsyer/gists{/gist_id}","starred_url":"https://api.github.com/users/dsyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dsyer/subscriptions","organizations_url":"https://api.github.com/users/dsyer/orgs","repos_url":"https://api.github.com/users/dsyer/repos","events_url":"https://api.github.com/users/dsyer/events{/privacy}","received_events_url":"https://api.github.com/users/dsyer/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-08-19T14:44:28Z","updated_at":"2015-08-19T14:44:28Z","closed_at":null,"body":"We used to enable it by default and went super cautious in 1.2 somewhere and disabled it. I think maybe that was over cautious because it only filters requests that come from a whitelist of \"local\" proxy IPs.\r\n\r\nAlternatively could we log an error if we find an `X-Forwarded-*` header and the valve isn't installed.\r\n\r\nCc @rwinch "}}