Method ServeHTTP

handler/handler.go:228–276

(wr http.ResponseWriter, req *http.Request)

}

func (s *ProxyHandler) ServeHTTP(wr http.ResponseWriter, req *http.Request) {
	if originator, isLoopback := s.isLoopback(req); isLoopback {
		s.logger.Critical("Loopback tunnel detected: %s is an outbound "+
			"address for another request from %s", req.RemoteAddr, originator)
		http.Error(wr, auth.BAD_REQ_MSG, http.StatusBadRequest)
		return
	}

	if s.directResponse != nil && isDirectRequest(req) {
		s.reject(s.directResponse, wr, req)
		return
	}

	ctx := req.Context()
	username, ok := s.auth.Validate(ctx, wr, req)
	localAddr := getLocalAddr(req.Context())
	s.logger.Info("Request: %v => %v %q %v %v %v", req.RemoteAddr, localAddr, username, req.Proto, req.Method, req.URL)

	if !ok {
		return
	}

	if (req.URL.Host == "" || req.URL.Scheme == "" && req.Method != "CONNECT") && req.ProtoMajor < 2 ||
		req.Host == "" && req.ProtoMajor == 2 {
		http.Error(wr, auth.BAD_REQ_MSG, http.StatusBadRequest)
		return
	}

	var ipHints *string
	if s.userIPHints {
		hintValues := req.Header.Values(HintsHeaderName)
		if len(hintValues) > 0 {
			req.Header.Del(HintsHeaderName)
			ipHints = &hintValues[0]
		}
	}
	ctx = ddto.BoundDialerParamsToContext(ctx, ipHints, trimAddrPort(localAddr))
	ctx = ddto.FilterParamsToContext(ctx, req, username)
	req = req.WithContext(ctx)
	delHopHeaders(req.Header)
	switch req.Method {
	case "CONNECT":
		s.HandleTunnel(wr, req, username)
	case "GETRANDOM":
		s.HandleGetRandom(wr, req, username)
	default:
		s.HandleRequest(wr, req, username)
	}
}

func (s *ProxyHandler) rejectAccess(wr http.ResponseWriter, req *http.Request) {
	if s.accessReject == nil {