BED-5301/5298: PenTest Result: Internal IP Address Disclosure AND Rate limit Bypass#1163

Open

ALCooper12 wants to merge 11 commits intomainfrom BED-5301

+122-124

Commits on Feb 21, 2025

Added the ulule/limiter library(module) to replace tollbooth for implementing our current rate limiting middleware logic
ALCooper12
committed
Forgot to uncomment/delete old library and I made notes of what tests I need to fix (maybe even add)
ALCooper12
committed

Commits on Feb 25, 2025

Commits on Feb 27, 2025

Added user configuration for setting a count of trusted proxies and corrected some logic
ALCooper12
committed
Separated the removing of certain rate limit headers into its own wrapper function for better understanding and readability
ALCooper12
committed

Commits on Feb 28, 2025

Updated config files to include new trusted_proxies field
ALCooper12
committed

Commits on Mar 4, 2025