Add upper bound check (maxPort = 65535) to reject invalid port numbers. Add comprehensive test cases for port validation.
- Store lastSeen timestamp per IP limiter entry - Lazy sweep removes entries older than 10 minutes on each request - Add Retry-After header to 429 responses - Add test for stale entry eviction Fixes memory leak under sustained attack from many IPs.
user