4 Commits

Author	SHA1	Message	Date
Abhimanyu Saharan	6d2ff60a82	fix(security): Stop logging raw trusted proxy entries	2026-03-07 23:47:00 +05:30
Hugh Brown	0a749db2c4	Remove unused imports	2026-03-07 23:35:10 +05:30
Hugh Brown	3f333e1592	Add isort fix	2026-03-07 23:35:10 +05:30
Hugh Brown	f1bcf72810	feat: add trusted client-IP extraction from proxy headers ... Add get_client_ip() helper that inspects Forwarded and X-Forwarded-For headers only when the direct peer is in TRUSTED_PROXIES (comma-separated IPs/CIDRs). Replaces raw request.client.host in rate-limit and webhook source_ip to prevent all traffic collapsing behind a reverse proxy IP. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-07 23:35:10 +05:30