root 77d276da04 fix: add login rate limiting and prevent IP spoofing via headers ... - Add RateLimitMiddleware(10/min) to POST /login (previously unprotected) - Use RemoteAddr instead of X-Real-IP/X-Forwarded-For in getRemoteIp() and rate limiter - Prevents brute-force login and rate-limit bypass via spoofed headers		2026-04-25 11:43:03 +08:00
..
domainValidator.go	docs: add comments for all functions	2025-09-20 09:35:50 +02:00
middleware_test.go	test: add unit tests for critical modules and fix flaky redirect middleware	2026-04-03 08:44:51 +08:00
ratelimit.go	fix: add login rate limiting and prevent IP spoofing via headers	2026-04-25 11:43:03 +08:00
redirect.go	test: add unit tests for critical modules and fix flaky redirect middleware	2026-04-03 08:44:51 +08:00