Files
everything-claude-code/skills
AlexisLeDain 8f65048bc3 fix(security): replace spoofable X-Forwarded-For with getRemoteAddr in rate limiter
X-Forwarded-For is client-controlled and trivially bypassable for rate
limiting. Replaced with HttpServletRequest.getRemoteAddr() which uses
the container-provided remote address. Added note about configuring
quarkus.http.proxy.proxy-address-forwarding for trusted proxy setups.
2026-04-09 16:07:46 +02:00
..
2026-04-01 16:09:54 -07:00
2026-04-05 15:42:58 -07:00
2026-04-05 15:46:01 -07:00
2026-03-29 21:21:18 -04:00