Skip to content

fix: Rate limit is bypassed by sending request header X-Forwarded-For: 127.0.0.1 when Parse Server option trustProxy is permissive - #10664

Merged
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/rate-limit-loopback-exemption-x-forwarded-for
Sep 13, 2026
Merged

fix: Rate limit is bypassed by sending request header X-Forwarded-For: 127.0.0.1 when Parse Server option trustProxy is permissive#10664
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/rate-limit-loopback-exemption-x-forwarded-for

fix: Empty `X-Forwarded-For` header is treated as absent when detecti…

73058f3
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 error and 1 warning
Code Analysis (javascript)
succeeded Sep 13, 2026 in 1m 12s