Diego Rodrigues de Sa e Souza
|
d773bf7720
|
fix(auth): only trust forwarding headers from loopback TCP peers (#4689)
Integrated into release/v3.8.37 — loopback-gated forwarding headers (IP spoofing fix). Cherry-picked onto current release tip; ipUtils.test.ts 9/9 green.
|
2026-06-25 21:26:11 -03:00 |
|