poslop/palette
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

#280: remove PALETTE_TRUSTED_IP_HEADER, rate limits key on peer address only #291

Merged
fen merged 1 commits from fix-280-r2 into dev 2026-09-18 01:53:24 +00:00
Conversation 0 Commits 1 Files Changed 4
+9 -52
1 Commits
Author SHA1 Message Date
fen aac1725c25 #280: remove PALETTE_TRUSTED_IP_HEADER, key rate limits on peer address only
CI / docker (pull_request) Skipped
Details
CI / test (pull_request) Successful in 31s
Details 
Owner follow-up to the #280 fix (PR #284): the trusted-header env var is
gone. clientIP() now uses the peer address exclusively and ignores all
client-supplied IP headers; the env var row is removed from the README.
 2026-09-17 20:48:52 -05:00