safe-global / safe-client-gateway / 27616799800

90%

main: 90%

Build Type

Pull #3170

github

Committed by compojoom

Commit Message

fix: resolve req.ip from X-Forwarded-For via trust proxy

Configure Express `trust proxy` so req.ip reflects the originating
client rather than the nearest upstream hop. The rate-limit, captcha
and blocklist guards rely on req.ip, so this gives them the correct
client address. Replace the getClientIp helper with req.ip.

Configurable via EXPRESS_TRUST_PROXY (default `loopback, uniquelocal`).

Pull Request Pull Request #3170: fix: key rate limits on real client IP via trust proxy

Coverage Stats

4619 of 5495 branches covered (84.06%)

Branch coverage included in aggregate %.

6 of 6 new or added lines in 2 files covered. (100.0%)

3 existing lines in 2 files now uncovered.

17103 of 18564 relevant lines covered (92.13%)

595.63 hits per line