Files
palette/internal
fen b99e1bdb27
CI / test (pull_request) Successful in 26s
CI / docker (pull_request) Skipped
Fix #280 follow-up: remove PALETTE_TRUSTED_IP_HEADER
Per owner decision the optional proxy-header escape hatch is dead config:
remove the env var, its plumbing (Config.TrustedIPHeader, SetTrustedIPHeader),
and the README row. Rate-limit keying is always the peer address; no
client-supplied IP header is ever trusted. Tests updated to assert headers
(CF-Connecting-IP included) never influence clientIP.
2026-09-17 20:45:54 -05:00
..