You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Thomas Joise 1d715e6a64 fix(sec/d24): nginx sends X-Forwarded-For as $remote_addr (replace, not append) ... With the app's trust-proxy=1, an appended client-supplied XFF header would let a caller spoof req.ip and bypass the per-IP login/reveal rate limiters. Replacing with $remote_addr (the unforgeable socket peer) keys the limiters on the true client. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		4 days ago
..
PATHS-AND-NAMES.md	docs(deploy): HQ connects as shared postgres superuser (no per-app roles on box)	4 days ago
sims.hq.conf	fix(sec/d24): nginx sends X-Forwarded-For as $remote_addr (replace, not append)	4 days ago