long-agent 8665c97d0d fix(security): X-Forwarded-For IP 伪造防护 ...

- isTrustedProxy: 空可信代理列表时默认不信任（安全优先）
- realIP: 修正 XFF 遍历逻辑，从右到左跳过可信代理，返回第一个不可信的客户端 IP
- GetClientIP: 优先读取 IPFilterMiddleware 已验证的 client_ip，避免直接信任转发头

2026-05-08 10:35:20 +08:00

..

ip_test.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

ip.go

fix(security): X-Forwarded-For IP 伪造防护

2026-05-08 10:35:20 +08:00