un33k / python-ipware / 35775958826

99%

master: 93%

push

github

4.1.0: modern engine picks the best client IP, exhaustive tests (#28)

Best match (modern only; legacy unchanged):
- Rank addresses public > private > link-local > loopback; never return
  unspecified, multicast, broadcast or reserved addresses.
- Without proxy config, take the first public hop of a chain, not chain[0].
- trusted_route is True for any address resolved through a matching proxy
  config, including private clients.

Parsing and headers:
- Parse RFC 7239 Forwarded elements by their for= value.
- Reject malformed tokens instead of truncating them; skip non-string
  header values; case-insensitive header keys; reject empty proxy_list
  entries.
- Add Azure Front Door, DigitalOcean and Envoy headers below all 4.0.0
  entries; the released precedence order is pinned by a test.

Tests: exhaustive chain/config/header/spelling matrix against an
independent reference model, never-worse-than-legacy check, seeded fuzz.

CI: upload-artifact v7, download-artifact v8 (Node 24).

74 of 74 new or added lines in 2 files covered. (100.0%)

329 of 339 relevant lines covered (97.05%)

6.79 hits per line