AlexisLeDain 8f65048bc3 fix(security): replace spoofable X-Forwarded-For with getRemoteAddr in rate limiter ...

X-Forwarded-For is client-controlled and trivially bypassable for rate
limiting. Replaced with HttpServletRequest.getRemoteAddr() which uses
the container-provided remote address. Added note about configuring
quarkus.http.proxy.proxy-address-forwarding for trusted proxy setups.

8f65048bc3 · 2026-04-09 16:07:46 +02:00

History

..

business

fix: harden unicode safety checks

2026-03-29 21:21:18 -04:00

examples

feat: add product capability planning lane

2026-04-05 16:58:02 -07:00

ja-JP

fix(security): replace spoofable X-Forwarded-For with getRemoteAddr in rate limiter

2026-04-09 16:07:46 +02:00

ko-KR

docs: remove orphaned template translations

2026-04-05 17:16:18 -07:00

pt-BR

chore: remove legacy insaits integration

2026-04-05 20:19:21 -07:00

releases

chore: ship v1.10.0 release surface refresh

2026-04-05 13:20:18 -07:00

tr

fix(security): replace spoofable X-Forwarded-For with getRemoteAddr in rate limiter

2026-04-09 16:07:46 +02:00

zh-CN

fix: use Quarkus Platform Camel BOM instead of Apache Camel BOM

2026-04-09 16:05:28 +02:00

zh-TW

docs: refresh localized README switchers

2026-04-05 15:31:07 -07:00

ANTIGRAVITY-GUIDE.md

docs: add Antigravity setup and usage guide (#552)

2026-03-20 00:21:37 -07:00

ARCHITECTURE-IMPROVEMENTS.md

feat: architecture improvements — test discovery, hooks schema, catalog, command map, coverage, cross-harness docs

2026-03-10 19:36:57 -07:00

capability-surface-selection.md

docs: add capability surface selection guide

2026-04-06 14:21:28 -07:00

COMMAND-AGENT-MAP.md

feat(agents): add typescript-reviewer agent (#647)

2026-03-19 20:49:23 -07:00

continuous-learning-v2-spec.md

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00

ECC-2.0-REFERENCE-ARCHITECTURE.md

docs: add ECC 2.0 reference architecture from competitor research

2026-03-22 15:50:32 -07:00

ECC-2.0-SESSION-ADAPTER-DISCOVERY.md

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

HERMES-OPENCLAW-MIGRATION.md

docs: add Hermes to ECC migration guide

2026-04-05 17:18:54 -07:00

HERMES-SETUP.md

docs: add hermes setup guide

2026-04-05 17:53:08 -07:00

hook-bug-workarounds.md

docs: add canonical hook bug workaround guide

2026-04-06 14:12:21 -07:00

MANUAL-ADAPTATION-GUIDE.md

docs: add manual adaptation guide for non-native harnesses

2026-04-05 14:39:55 -07:00

MEGA-PLAN-REPO-PROMPTS-2026-03-12.md

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

PHASE1-ISSUE-BUNDLE-2026-03-12.md

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

PR-399-REVIEW-2026-03-12.md

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

PR-QUEUE-TRIAGE-2026-03-13.md

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

SELECTIVE-INSTALL-ARCHITECTURE.md

chore: ship v1.10.0 release surface refresh

2026-04-05 13:20:18 -07:00

SELECTIVE-INSTALL-DESIGN.md

feat: orchestration harness, selective install, observer improvements

2026-03-14 12:55:25 -07:00

SESSION-ADAPTER-CONTRACT.md

feat(session): add worker health alongside state in ecc.session.v1 (#751)

2026-03-22 15:39:51 -07:00

skill-adaptation-policy.md

docs: add skill adaptation policy

2026-04-06 14:30:23 -07:00

SKILL-DEVELOPMENT-GUIDE.md

refactor: move project guidelines example into docs

2026-04-05 15:03:59 -07:00

SKILL-PLACEMENT-POLICY.md

feat: define skill placement and provenance policy (#748)

2026-03-22 15:39:48 -07:00

token-optimization.md

docs: add Claude Code troubleshooting workarounds

2026-03-31 15:15:09 -07:00

TROUBLESHOOTING.md

docs: add canonical hook bug workaround guide

2026-04-06 14:12:21 -07:00