mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-06-11 10:43:10 +08:00
X-Forwarded-For is client-controlled and trivially bypassable for rate limiting. Replaced with HttpServletRequest.getRemoteAddr() which uses the container-provided remote address. Added note about configuring quarkus.http.proxy.proxy-address-forwarding for trusted proxy setups.