ik e2bed0db89 R13: Fix X-Forwarded-For trust boundary — only trust from known proxies ...

- Add _is_trusted_proxy() to check client IP against trusted CIDRs
- Only use X-Forwarded-For if connection came from trusted proxy
- Add TRUSTED_PROXY_CIDRS config (default: 127.0.0.1/32, ::1/128)
- Add parse_comma_separated_lists for env var parsing
- Add 3 unit tests: trusted CIDR check, untrusted ignores forwarded, trusted uses forwarded

2026-09-10 05:49:23 +07:00

..

api

R13: Fix X-Forwarded-For trust boundary — only trust from known proxies

2026-09-10 05:49:23 +07:00

web

R10: Fix TimeoutError handling — use DOMException.TimeoutError check

2026-09-10 05:43:34 +07:00