diff options
| author | Adam Soltys <[email protected]> | 2026-09-25 15:15:19 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-09-25 15:15:19 -0700 |
| commit | 56aef551bf72eb306d96b4b81b657c4a05037eb5 (patch) | |
| tree | 993408a95fb4bcdad2e762cdc6c24cbd10bf6415 /compose.yml.sample | |
| parent | cd5c18867a3b6764cd2b6108906b40b4578a65b4 (diff) | |
| download | coinos-server-56aef551bf72eb306d96b4b81b657c4a05037eb5.tar.gz coinos-server-56aef551bf72eb306d96b4b81b657c4a05037eb5.zip | |
app: don't trust client IP headers on onion requests
The tor container connects directly, bypassing Cloudflare, so the client could
set cf-connecting-ip, x-forwarded-for and rate-limit-by to anything. Pin those
requests to the tor container's address before the rate limiter runs.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Diffstat (limited to 'compose.yml.sample')
0 files changed, 0 insertions, 0 deletions