Files
Jan Larwig 0ab0bb01a5 Merge commit from fork
* fix: validate trusted IP proxy headers

Respect trusted proxy boundaries before using real-client-IP headers for authentication bypass decisions and safely traverse X-Forwarded-For chains.

Signed-off-by: Jan Larwig <jan@larwig.com>

* fix: trusted-ip header bypass

Signed-off-by: Jan Larwig <jan@larwig.com>

* docs: add changelog entry

Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz>
2026-10-01 10:42:18 +02:00
..
2026-10-01 10:42:18 +02:00
2026-03-19 01:10:21 +08:00
2026-10-01 10:42:18 +02:00
2026-03-19 01:10:21 +08:00
2026-03-19 01:10:21 +08:00