[{"data":1,"prerenderedAt":330},["ShallowReactive",2],{"navigation_docs":3,"diagnostic-content-NITRO0004":44},[4,8,12,16,20,24,28,32,36,40],{"title":5,"path":6,"stem":7},"CLI","\u002Fcli","1.cli",{"title":9,"path":10,"stem":11},"Nuxt","\u002Fnuxt","2.nuxt",{"title":13,"path":14,"stem":15},"Vue","\u002Fvue","3.vue",{"title":17,"path":18,"stem":19},"Vite","\u002Fvite","4.vite",{"title":21,"path":22,"stem":23},"Nitro","\u002Fnitro","5.nitro",{"title":25,"path":26,"stem":27},"TypeScript","\u002Ftypescript","6.typescript",{"title":29,"path":30,"stem":31},"shadcn","\u002Fshadcn","7.shadcn",{"title":33,"path":34,"stem":35},"Package","\u002Fpackage","8.package",{"title":37,"path":38,"stem":39},"Extending Doctor","\u002Fextending","9.extending",{"title":41,"path":42,"stem":43},"Pinia","\u002Fpinia","9.pinia",{"id":45,"title":46,"body":47,"category":53,"code":320,"description":321,"docsUrl":54,"extension":322,"fix":77,"framework":323,"meta":324,"navigation":325,"pack":56,"path":326,"ruleId":57,"rulePath":58,"seo":327,"severity":59,"source":60,"sourceUrl":61,"stem":328,"why":70,"__hash__":329},"diagnostics\u002Fdiagnostics\u002FNITRO0004.md","NITRO0004: Use request IP utilities instead of raw IP headers",{"type":48,"value":49,"toc":310},"minimark",[50,62,67,71,75,78,82,87,90,175,178,240,244,247,278,282,294,298,306],[51,52],"rule-metadata",{"category":53,"docsUrl":54,"fix":55,"pack":56,"ruleId":57,"rulePath":58,"severity":59,"source":60,"sourceUrl":61},"request","https:\u002F\u002Fh3.dev\u002Futils\u002Frequest#getrequestipevent","suggestion","vite-doctor\u002Fnitro","nitro\u002Frequest\u002Fprefer-get-request-ip","\u002Fnitro\u002Frules\u002Frequest\u002Fprefer-get-request-ip","warn","src\u002Frule-packs\u002Fnitro\u002Frules\u002Fprefer-get-request-ip.ts","https:\u002F\u002Fgithub.com\u002Fonmax\u002Fvite-doctor\u002Fblob\u002Fmain\u002Fsrc\u002Frule-packs\u002Fnitro\u002Frules\u002Fprefer-get-request-ip.ts",[63,64,66],"h2",{"id":65},"why-it-happens","Why it happens",[68,69,70],"p",{},"Reading x-forwarded-for directly trusts raw proxy input and may return a spoofed or comma-separated value instead of the client address.",[63,72,74],{"id":73},"fix","Fix",[68,76,77],{},"Use the H3\u002FNitro request IP utility and centralize trusted proxy handling instead of reading IP headers directly.",[63,79,81],{"id":80},"example","Example",[83,84,86],"h3",{"id":85},"use-getrequestip","Use getRequestIP",[68,88,89],{},"Before",[91,92,97],"pre",{"className":93,"code":94,"language":95,"meta":96,"style":96},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","export default defineEventHandler((event) => {\n  return getHeader(event, 'x-forwarded-for')\n})\n","ts","",[98,99,100,137,167],"code",{"__ignoreMap":96},[101,102,105,109,112,116,120,123,127,130,134],"span",{"class":103,"line":104},"line",1,[101,106,108],{"class":107},"s7zQu","export",[101,110,111],{"class":107}," default",[101,113,115],{"class":114},"s2Zo4"," defineEventHandler",[101,117,119],{"class":118},"sTEyZ","(",[101,121,119],{"class":122},"sMK4o",[101,124,126],{"class":125},"sHdIc","event",[101,128,129],{"class":122},")",[101,131,133],{"class":132},"spNyl"," =>",[101,135,136],{"class":122}," {\n",[101,138,140,143,146,149,151,154,157,161,164],{"class":103,"line":139},2,[101,141,142],{"class":107},"  return",[101,144,145],{"class":114}," getHeader",[101,147,119],{"class":148},"swJcz",[101,150,126],{"class":118},[101,152,153],{"class":122},",",[101,155,156],{"class":122}," '",[101,158,160],{"class":159},"sfazB","x-forwarded-for",[101,162,163],{"class":122},"'",[101,165,166],{"class":148},")\n",[101,168,170,173],{"class":103,"line":169},3,[101,171,172],{"class":122},"}",[101,174,166],{"class":118},[68,176,177],{},"After",[91,179,181],{"className":93,"code":180,"language":95,"meta":96,"style":96},"export default defineEventHandler((event) => {\n  return getRequestIP(event, { xForwardedFor: true })\n})\n",[98,182,183,203,234],{"__ignoreMap":96},[101,184,185,187,189,191,193,195,197,199,201],{"class":103,"line":104},[101,186,108],{"class":107},[101,188,111],{"class":107},[101,190,115],{"class":114},[101,192,119],{"class":118},[101,194,119],{"class":122},[101,196,126],{"class":125},[101,198,129],{"class":122},[101,200,133],{"class":132},[101,202,136],{"class":122},[101,204,205,207,210,212,214,216,219,222,225,229,232],{"class":103,"line":139},[101,206,142],{"class":107},[101,208,209],{"class":114}," getRequestIP",[101,211,119],{"class":148},[101,213,126],{"class":118},[101,215,153],{"class":122},[101,217,218],{"class":122}," {",[101,220,221],{"class":148}," xForwardedFor",[101,223,224],{"class":122},":",[101,226,228],{"class":227},"sfNiH"," true",[101,230,231],{"class":122}," }",[101,233,166],{"class":148},[101,235,236,238],{"class":103,"line":169},[101,237,172],{"class":122},[101,239,166],{"class":118},[63,241,243],{"id":242},"verify-the-fix","Verify the fix",[68,245,246],{},"Run only this rule after editing so the report stays focused on the diagnostic you are closing:",[91,248,252],{"className":249,"code":250,"language":251,"meta":96,"style":96},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","pnpm vite-doctor . --framework nitro --rules nitro\u002Frequest\u002Fprefer-get-request-ip\n","bash",[98,253,254],{"__ignoreMap":96},[101,255,256,260,263,266,269,272,275],{"class":103,"line":104},[101,257,259],{"class":258},"sBMFI","pnpm",[101,261,262],{"class":159}," vite-doctor",[101,264,265],{"class":159}," .",[101,267,268],{"class":159}," --framework",[101,270,271],{"class":159}," nitro",[101,273,274],{"class":159}," --rules",[101,276,277],{"class":159}," nitro\u002Frequest\u002Fprefer-get-request-ip\n",[63,279,281],{"id":280},"useful-links","Useful links",[283,284,285],"ul",{},[286,287,288],"li",{},[289,290,293],"a",{"href":54,"rel":291},[292],"nofollow","Upstream docs",[63,295,297],{"id":296},"related-rule","Related rule",[283,299,300],{},[286,301,302],{},[289,303,304],{"href":58},[98,305,57],{},[307,308,309],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}",{"title":96,"searchDepth":139,"depth":139,"links":311},[312,313,314,317,318,319],{"id":65,"depth":139,"text":66},{"id":73,"depth":139,"text":74},{"id":80,"depth":139,"text":81,"children":315},[316],{"id":85,"depth":169,"text":86},{"id":242,"depth":139,"text":243},{"id":280,"depth":139,"text":281},{"id":296,"depth":139,"text":297},"NITRO0004","Request-sensitive Nitro code should not trust client-controlled forwarding headers directly.","md","nitro",{},true,"\u002Fdiagnostics\u002Fnitro0004",{"title":46,"description":321},"diagnostics\u002FNITRO0004","c9SxecDGyTA19E4nhzN1mmYPJMSWkH2G94KLJMgR-fU",1791309490634]