Elie Habib 3d2a4e4df4 fix(rate-limit): prioritize cf-connecting-ip over x-real-ip for correct per-user rate limiting (#1241) ...

With Cloudflare proxy in front of Vercel, x-real-ip contains the CF edge
server IP (shared across all users behind the same edge), not the real
client IP. This caused all users to share a single rate-limit bucket,
triggering 429 storms on classify-event.

Also adds exponential backoff (60s→120s→240s→5min cap) and queue trimming
on repeated 429s to prevent client-side hammering.

2026-03-08 02:08:06 +04:00

..

acled.ts

refactor(server): consolidate declare const process into shared env.d.ts (#752)

2026-03-02 14:01:41 +04:00

cache-keys.ts

perf(baseline): move temporal baseline for news+fires to server-side (#1194)

2026-03-07 16:15:43 +04:00

constants.ts

refactor: deduplicate clampInt into server/_shared/constants

2026-03-03 01:11:44 +04:00

hash.ts

fix(security): harden cache keys against injection and hash collision (WM-2026-001/002) (#1103)

2026-03-06 10:33:41 +04:00

rate-limit.ts

fix(rate-limit): prioritize cf-connecting-ip over x-real-ip for correct per-user rate limiting (#1241)

2026-03-08 02:08:06 +04:00

redis.ts

fix(health): write seed-meta on cache hits (throttled 5min) (#1138)

2026-03-06 23:49:51 +04:00

response-headers.ts

feat(gateway): complete edge cache tier coverage + degraded-response policy (#484)

2026-02-28 00:34:58 +04:00