safe-global / safe-client-gateway / 27615530752

90%

main: 88%

Build Type

Pull #3170

github

Committed by compojoom

Commit Message

fix: resolve req.ip from X-Forwarded-For via trust proxy

Configure Express `trust proxy` so req.ip reflects the originating
client rather than the nearest upstream hop. The rate-limit, captcha
and blocklist guards rely on req.ip, so this gives them the correct
client address. Replace the getClientIp helper with req.ip.

Configurable via EXPRESS_TRUST_PROXY (default `loopback, uniquelocal`).

Pull Request Pull Request #3170: fix: key rate limits on real client IP via trust proxy

Coverage Stats

4622 of 5495 branches covered (84.11%)

Branch coverage included in aggregate %.

6 of 0 new or added lines in 0 files covered. (NaN%)

9 existing lines in 2 files now uncovered.

17104 of 18564 relevant lines covered (92.14%)

595.57 hits per line