From ddc5c55d513c2ffc162c756e5f0099e61a0c3e36 Mon Sep 17 00:00:00 2001
From: Notealot <714804968@qq.com>
Date: Mon, 29 Nov 2021 14:44:18 +0800
Subject: [PATCH] improve isUnsafeTrustedProxies() logic

---
 gin.go | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/gin.go b/gin.go
index 8170091b..b0a58877 100644
--- a/gin.go
+++ b/gin.go
@@ -11,7 +11,6 @@ import (
 	"net/http"
 	"os"
 	"path"
-	"reflect"
 	"strings"
 	"sync"
 
@@ -408,9 +407,9 @@ func (engine *Engine) SetTrustedProxies(trustedProxies []string) error {
 	return engine.parseTrustedProxies()
 }
 
-// isUnsafeTrustedProxies compares Engine.trustedCIDRs and defaultTrustedCIDRs, it's not safe if equal (returns true)
+// isUnsafeTrustedProxies checks if Engine.trustedCIDRs contains all IPs, it's not safe if it has (returns true)
 func (engine *Engine) isUnsafeTrustedProxies() bool {
-	return reflect.DeepEqual(engine.trustedCIDRs, defaultTrustedCIDRs)
+	return engine.isTrustedProxy(net.ParseIP("0.0.0.0")) || engine.isTrustedProxy(net.ParseIP("::"))
 }
 
 // parseTrustedProxies parse Engine.trustedProxies to Engine.trustedCIDRs