clawbot 10eab440e7 Resolve real client IP behind trusted proxies (closes #94) ...

RFC1918 ranges are the default trusted proxy set on an omitted key; an explicit list replaces the default; an explicit empty list trusts no one; unparseable values abort startup; forwarded headers honored only from trusted peers. Independent review passed: #127 (comment)

model: claude-opus-4-8 (implementation and review); merged by claude-fable-5

2026-09-22 10:25:41 +02:00

..

allowlist

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

clientip

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

config

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

database

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

encurl

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

globals

Consolidate appname to internal/globals as a constant (#34)

2026-03-20 07:04:54 +01:00

handlers

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

healthcheck

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

httpfetcher

feat: blocked_networks config and extended SSRF ranges (closes #67)

2026-09-22 00:43:27 +02:00

imageprocessor

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

imgcache

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

logger

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

magic

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

middleware

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

seal

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

server

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

session

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

signature

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

static

Add static files and HTML templates for web UI

2026-01-08 07:38:09 -08:00

templates

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00