5 Commits

Include renames

Author	SHA1	Message	Date
fen	f63efc6d88	Fix rate limiter bypass via client-controlled X-Forwarded-For (#280) ... clientIP() keyed rate-limit buckets on the rightmost X-Forwarded-For entry, assuming traefik appends the real client IP. The deployed ingress does not rewrite XFF, so rotating the header gave a fresh bucket per request (pentest H1: 8 creates with rotating XFF -> 6x201). Now the bucket keys on the actual peer address (RemoteAddr) by default; every client-supplied IP header is ignored. Deployments whose ingress overwrites a client-IP header can opt in via PALETTE_TRUSTED_IP_HEADER (e.g. CF-Connecting-IP behind Cloudflare) to restore per-client limits. Adds tests: rotating XFF no longer resets the bucket; the trusted header is honored only when explicitly configured.	2026-09-17 20:29:40 -05:00
poslop	9df6224a27	Result box: color-code by status + friendly error messages from error codes (#105) ... - Backend create/can validation paths emit machine-readable error codes (slug_taken, slug_invalid, content_empty, content_too_large, expiry_invalid, rate_limited, ...) alongside the human message - new.html JS maps codes to plain-language guidance with generic fallback - Result card colored via --ok/--err/--warn left border (result-ok/err/warn) - docs/API.md error section documents the code field - Tests assert the code on every validation path	2026-09-09 17:28:25 -05:00
agent	3d1d5ee1fd	ratelimit: key on rightmost X-Forwarded-For entry (fixes #85)	2026-09-09 10:57:59 -05:00
palette-agent	9811191648	admin: per-IP rate limit (5/min) on admin key attempts (#66)	2026-09-09 09:15:01 -05:00
poslop	4f1e901f04	Refactor: split monolith into cmd/palette + internal/{store,api,web,lang} (#35)	2026-09-09 01:33:39 -05:00