Attempt to spoof header (Shib-Cookie-Name) was detected

[Cantor, Scott]

> Of course, disabling protection from cookie theft is very bad idea and should
> be avoided.An other solution would be to have a list of exceptions like
> 127.0.0.1. So is there any way to do that, or is it not developed yet?

If you're proxying you should pass the client address in a header, and then it can pick that header up via the REMOTE_ADDR setting.

-- Scott