sneak d84e42c670 Pin the rate-limit key for an empty RemoteAddr (closes #168) ...

A request with an empty RemoteAddr falls through to the raw-value
fallback and keys on the empty string, so every such request shares
one bucket. That is the fail-closed direction and stays as it is. A
test now pins it, and the comment at the fallback tells it apart from
the Unix-socket case.

Model: opus-5-5

2026-10-02 14:52:04 +00:00

..

accesslog_test.go

Log the client address next to the peer address (closes #270)

2026-10-02 16:50:22 +02:00

clientip_test.go

Log the client address next to the peer address (closes #270)

2026-10-02 16:50:22 +02:00

csrf_test.go

Render admin page errors in the normal layout (closes #382)

2026-10-02 08:15:12 +02:00

csrf.go

Log the client address next to the peer address (closes #270)

2026-10-02 16:50:22 +02:00

export_test.go

Log the client address next to the peer address (closes #270)

2026-10-02 16:50:22 +02:00

logbound_test.go

Render admin page errors in the normal layout (closes #382)

2026-10-02 08:15:12 +02:00

loginguard_test.go

Stop a slow host turning a login-guard test into a segfault (closes #186)

2026-08-18 05:01:13 +02:00

loginguard.go

Log the client address next to the peer address (closes #270)

2026-10-02 16:50:22 +02:00

metrics_method_test.go

Move webhook pages to /hook/ID and inbound URLs to /h/UUID (closes #367)

2026-10-02 06:32:14 +02:00

metrics_test.go

Serve /metrics from a registry of its own (closes #227)

2026-10-02 09:06:20 +02:00

metrics.go

Let a handler flush or set a write deadline through the access log and metrics (closes #191)

2026-10-02 13:08:54 +02:00

middleware_test.go

Build the middleware test cookie stores with the production constructor (closes #154)

2026-10-02 14:30:51 +02:00

middleware.go

Log the client address next to the peer address (closes #270)

2026-10-02 16:50:22 +02:00

ratelimit_test.go

Pin the rate-limit key for an empty RemoteAddr (closes #168)

2026-10-02 14:52:04 +00:00

ratelimit.go

Pin the rate-limit key for an empty RemoteAddr (closes #168)

2026-10-02 14:52:04 +00:00

recoverer_test.go

Let a handler flush or set a write deadline through the access log and metrics (closes #191)

2026-10-02 13:08:54 +02:00

recoverer.go

Render admin page errors in the normal layout (closes #382)

2026-10-02 08:15:12 +02:00

testing.go

Serve /metrics from a registry of its own (closes #227)

2026-10-02 09:06:20 +02:00