From 2b55e8983135fedbf845541761dbff1e2544e45d Mon Sep 17 00:00:00 2001
From: ghaddaditw <40211818-ghaddaditw@users.noreply.replit.com>
Date: Sun, 8 Jun 2025 08:13:58 +0000
Subject: [PATCH] Improve server security configuration to prevent potential
 abuse

Disables trustProxy in rateLimit to address misconfiguration and enhance security.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: c5f0c281-8dd8-4846-b452-4a07bcd21062
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/9777c70b-fc38-4831-8d6b-78dfffe041b0/96d113bc-38b6-41ed-834e-8d1b2cd8734e.jpg
---
 server/middleware/security.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/middleware/security.ts b/server/middleware/security.ts
index 9408858..aa83a9c 100644
--- a/server/middleware/security.ts
+++ b/server/middleware/security.ts
@@ -13,6 +13,7 @@ export const generalRateLimit = rateLimit({
   },
   standardHeaders: true,
   legacyHeaders: false,
+  trustProxy: false, // Disable trust proxy to fix configuration error
   skip: (req) => {
     // Skip rate limiting for static assets and development
     return req.path.includes('/src/') || req.path.includes('/@') ||