rf4-spotter

120 Commits 1 Branch 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
ik	e2bed0db89	R13: Fix X-Forwarded-For trust boundary — only trust from known proxies - Add _is_trusted_proxy() to check client IP against trusted CIDRs - Only use X-Forwarded-For if connection came from trusted proxy - Add TRUSTED_PROXY_CIDRS config (default: 127.0.0.1/32, ::1/128) - Add parse_comma_separated_lists for env var parsing - Add 3 unit tests: trusted CIDR check, untrusted ignores forwarded, trusted uses forwarded	2026-09-10 05:49:23 +07:00
ik	d962ba2f90	fix: R02 activity API contract — PaginatedActivity + all consumers (#1788956171115 )	2026-09-09 20:58:42 +07:00
ik	b73580c720	Persist privacy-safe submission rate limits	2026-09-03 08:16:12 +07:00

Author

SHA1

Message

Date

ik

e2bed0db89

R13: Fix X-Forwarded-For trust boundary — only trust from known proxies

- Add _is_trusted_proxy() to check client IP against trusted CIDRs
- Only use X-Forwarded-For if connection came from trusted proxy
- Add TRUSTED_PROXY_CIDRS config (default: 127.0.0.1/32, ::1/128)
- Add parse_comma_separated_lists for env var parsing
- Add 3 unit tests: trusted CIDR check, untrusted ignores forwarded, trusted uses forwarded

2026-09-10 05:49:23 +07:00

ik

d962ba2f90

fix: R02 activity API contract — PaginatedActivity + all consumers (#1788956171115 )

2026-09-09 20:58:42 +07:00

ik

b73580c720

Persist privacy-safe submission rate limits

2026-09-03 08:16:12 +07:00