long-agent 8665c97d0d fix(security): X-Forwarded-For IP 伪造防护 ...

- isTrustedProxy: 空可信代理列表时默认不信任（安全优先）
- realIP: 修正 XFF 遍历逻辑，从右到左跳过可信代理，返回第一个不可信的客户端 IP
- GetClientIP: 优先读取 IPFilterMiddleware 已验证的 client_ip，避免直接信任转发头

2026-05-08 10:35:20 +08:00

..

auth_bootstrap_test.go

fix: v6 code review P0 auth/IDOR fixes + frontend regression patches

2026-04-23 07:14:12 +08:00

auth.go

perf: Sprint 19 P0/P1 性能优化落地

2026-04-18 22:57:44 +08:00

cache_control.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

cors.go

fix: resolve P0 security issues per governance baseline

2026-04-18 09:32:54 +08:00

error.go

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

gzip.go

perf: Sprint 19 P0/P1 性能优化落地

2026-04-18 22:57:44 +08:00

ip_filter_test.go

fix(security): X-Forwarded-For IP 伪造防护

2026-05-08 10:35:20 +08:00

ip_filter.go

fix(security): X-Forwarded-For IP 伪造防护

2026-05-08 10:35:20 +08:00

logger.go

perf: Sprint 19 P0/P1 性能优化落地

2026-04-18 22:57:44 +08:00

operation_log.go

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00

ratelimit_test.go

fix: v6 code review P0 auth/IDOR fixes + frontend regression patches

2026-04-23 07:14:12 +08:00

ratelimit.go

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00

rbac.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

response_wrapper.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

runtime_test.go

test: add TraceID, ErrorHandler, Recover middleware tests

2026-04-09 10:18:31 +08:00

security_headers.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

trace_id.go

feat: 系统全面优化 - 设备管理/登录日志导出/性能监控/设置页面

2026-04-07 12:08:16 +08:00