Files
webhooker/internal/config
sneak 03b19c48e9
check / check (push) Waiting to run
Key the TRUSTED_PROXIES rule to the source address seen on arrival
The README and the TrustedProxies comment now say, once per passage,
that the list must be set to the proxy's address alone if any client
can reach webhooker or the proxy from an RFC 1918 source address,
directly or through anything that can rewrite source addresses, and
that the address to set is the remoteIP field of the http request log
line. The loopback case in the reverse-proxy checklist is now a proxy
reaching the binary bound to 127.0.0.1. Other sentences about which
clients can choose their own rate-limit key are cut.

Model: opus-5-5
2026-10-01 21:19:34 +00:00
..