long-agent 8665c97d0d fix(security): X-Forwarded-For IP 伪造防护 ...

- isTrustedProxy: 空可信代理列表时默认不信任（安全优先）
- realIP: 修正 XFF 遍历逻辑，从右到左跳过可信代理，返回第一个不可信的客户端 IP
- GetClientIP: 优先读取 IPFilterMiddleware 已验证的 client_ip，避免直接信任转发头

2026-05-08 10:35:20 +08:00

..

api

fix(security): X-Forwarded-For IP 伪造防护

2026-05-08 10:35:20 +08:00

auth

security(auth): raise Argon2id calibration minimums to OWASP thresholds (SEC-ARGON2)

2026-05-08 10:24:10 +08:00

cache

perf: Sprint 19 P0/P1 性能优化落地

2026-04-18 22:57:44 +08:00

concurrent

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

config

feat: complete production readiness improvements

2026-04-12 16:15:32 +08:00

database

perf: Sprint 19 P0/P1 性能优化落地

2026-04-18 22:57:44 +08:00

domain

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

e2e

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

integration

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

middleware

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

monitoring

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

pagination

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

performance

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

pkg

fix(security): X-Forwarded-For IP 伪造防护

2026-05-08 10:35:20 +08:00

repository

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00

robustness

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

security

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00

server

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00

service

fix(n+1): 批量查询替代循环单查

2026-05-08 08:05:26 +08:00

testdb

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

testutil

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

util

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00