Commit Graph
16 Commits
Author SHA1 Message Date
ik 7c28a0c36a security: rate limit admin authentication 2026-09-12 21:33:26 +07:00
ik e2bed0db89 R13: Fix X-Forwarded-For trust boundary — only trust from known proxies
- Add _is_trusted_proxy() to check client IP against trusted CIDRs
- Only use X-Forwarded-For if connection came from trusted proxy
- Add TRUSTED_PROXY_CIDRS config (default: 127.0.0.1/32, ::1/128)
- Add parse_comma_separated_lists for env var parsing
- Add 3 unit tests: trusted CIDR check, untrusted ignores forwarded, trusted uses forwarded
2026-09-10 05:49:23 +07:00
ik 214b328cd2 perf: cache public activity aggregates 2026-09-07 18:54:58 +07:00
ik 02b67741f8 feat: expose deployment build identity 2026-09-07 18:43:20 +07:00
ik 0701383c28 feat: schedule authorized community imports 2026-09-07 16:45:49 +07:00
ik 2200336524 feat: add production data retention 2026-09-06 14:37:58 +07:00
ik 870d9cc7f9 feat: harden production data and backups
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-06 14:08:07 +07:00
ik a4bd395856 feat: add production deployment for rf4spotter.ru 2026-09-06 13:52:30 +07:00
ik 398b35e843 feat: add privacy-safe structured logging 2026-09-04 07:49:14 +07:00
ik 3b26c59219 feat: add dependency readiness checks 2026-09-04 07:38:34 +07:00
ik b73580c720 Persist privacy-safe submission rate limits 2026-09-03 08:16:12 +07:00
ik a528fc707f Add conditional caching and opt-in import scheduler 2026-09-03 08:04:57 +07:00
ik ddd8b84055 Add administrative official import API 2026-09-03 07:59:15 +07:00
ik c5242720b1 Apply reference design to Astro and add screenshot storage 2026-09-03 07:53:53 +07:00
ik 6d536d0ade Add user catch submission and moderation workflow 2026-09-02 20:33:58 +07:00
ik d3a45248ef Build Dockerized MVP scaffold and records importer 2026-09-02 20:29:02 +07:00