CarterPerez-dev 97da7fb3a0 feat(canary): add configurable trusted-proxy CIDRs for X-Forwarded-For ... RealIP only reads XFF when the immediate peer sits in TRUSTED_PROXY_CIDRS, so an untrusted client can no longer spoof its source IP while a real client behind a known reverse proxy still resolves correctly. Parses the comma-separated list via a knadh/koanf ProviderWithValue callback (blank or whitespace-only input leaves the built-in default intact), wires the var through both compose files and .env.example, and adds MYSQL_FAKE_* and TURNSTILE_SECRET env aliases. Covered by config_test.go.		2026-07-19 02:45:10 -04:00
..
cmd	cracked	2026-05-23 05:01:01 -04:00
internal	feat(canary): add configurable trusted-proxy CIDRs for X-Forwarded-For	2026-07-19 02:45:10 -04:00
.air.toml	fix(canary-phase1): clear all post-phase-1 audit observations + header normalization	2026-05-10 06:15:26 -04:00
.gitignore	fix(canary-phase0): address audit findings before phase rollup	2026-05-10 05:37:32 -04:00
.golangci.yml	chore(canary): scope gosec G101/G107/G704 to outbound HTTP packages	2026-05-14 00:32:07 -04:00
config.yaml	fix(canary-phase1): clear all post-phase-1 audit observations + header normalization	2026-05-10 06:15:26 -04:00
go.mod	chore(deps): bump golang.org/x/crypto	2026-07-09 21:32:07 +00:00
go.sum	chore(deps): bump golang.org/x/crypto	2026-07-09 21:32:07 +00:00