georges/menassit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve server security configuration to prevent potential abuse

Browse Source 
Disables trustProxy in rateLimit to address misconfiguration and enhance security.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: c5f0c281-8dd8-4846-b452-4a07bcd21062
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/9777c70b-fc38-4831-8d6b-78dfffe041b0/96d113bc-38b6-41ed-834e-8d1b2cd8734e.jpg
This commit is contained in:
ghaddaditw
2025-06-08 08:13:58 +00:00
parent 1921316e03
commit 2b55e89831
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/middleware/security.ts
+1
View File
@@ -13,6 +13,7 @@ export const generalRateLimit = rateLimit({
},
standardHeaders: true,
legacyHeaders: false,
trustProxy: false, // Disable trust proxy to fix configuration error
skip: (req) => {
// Skip rate limiting for static assets and development
return req.path.includes('/src/') || req.path.includes('/@') ||