clawbot 9bfd033a29 Bound X-Forwarded-For scanning allocation to the hop cap (closes #133) ...

forwardedClientAddr now walks the header values in reverse with strings.LastIndexByte instead of joining and splitting, so allocation is bounded by the 64-hop cap rather than by header length: 1.6 MB per call becomes 16 bytes for a 1 MB chain. Semantics are unchanged, verified by differential testing against the previous implementation.

2026-08-12 12:19:14 +02:00

..

csrf_test.go

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

csrf.go

fix: detect TLS per-request in CSRF middleware to fix login (#54)

2026-03-18 04:30:57 +01:00

export_test.go

Bound X-Forwarded-For scanning allocation to the hop cap (closes #133)

2026-08-12 12:19:14 +02:00

middleware_test.go

Enforce the body size limit before CSRF parses the form (closes #90)

2026-08-11 14:37:38 +02:00

middleware.go

Enforce the body size limit before CSRF parses the form (closes #90)

2026-08-11 14:37:38 +02:00

ratelimit_test.go

Bound X-Forwarded-For scanning allocation to the hop cap (closes #133)

2026-08-12 12:19:14 +02:00

ratelimit.go

Bound X-Forwarded-For scanning allocation to the hop cap (closes #133)

2026-08-12 12:19:14 +02:00

testing.go

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00