prism/service
lone-cloud 37d745703c
security: remove RealIP middleware, tighten rate limiter defaults
- remove chi middleware.RealIP; deprecated in chi v5.3.0 due to IP spoofing
  vulnerabilities (GHSA-3fxj-6jh8-hvhx, GHSA-rjr7-jggh-pgcp, GHSA-9g5q-2w5x-hmxf)
- lower default RATE_LIMIT from 100 to 20 req/s per IP
- support RATE_LIMIT=0 to disable rate limiting entirely (for deployments behind
  a remote reverse proxy with its own rate limiting)
- fix incorrect .env.example comment (was 'per 15 minute window', is per second)
2026-05-23 18:37:55 -07:00
..
config security: remove RealIP middleware, tighten rate limiter defaults 2026-05-23 18:37:55 -07:00
credentials code cleanups and refactors 2026-02-26 18:35:11 -08:00
delivery shorten email actions to include just the first @ part 2026-04-15 09:48:07 -07:00
integration fix telegram linking, minor fixes for upcoming release 2026-04-15 07:58:38 -07:00
server security: remove RealIP middleware, tighten rate limiter defaults 2026-05-23 18:37:55 -07:00
subscription code cleanups and refactors 2026-02-26 18:35:11 -08:00
util code cleanups and refactors 2026-02-26 18:35:11 -08:00