lukaszraczylo eaf7c4ddca fix(worker): key rate limiter on peer IP, not forged headers ...

The rate limiter trusted X-Real-IP, so a client could dodge its limit by
sending a new header value on each request. It must key on the connection
peer address. The key also strips the port, so one client shares one bucket.

2026-10-03 12:02:17 +01:00

..

sdk

fix(lint): clear the staticcheck findings

2026-10-03 05:00:27 +01:00

session

fixup! chore: update marketplace for v0.11.37

2026-03-06 15:39:52 +00:00

sse

fixup! chore: update marketplace for v0.11.37

2026-03-06 15:39:52 +00:00

static

Dynamically download ONNX libraries from microshit's website.

2025-12-19 02:17:14 +00:00

clustering.go

Initial commit

2025-12-19 02:17:02 +00:00

handlers_context.go

fix: prevent MCP server hanging by adding concurrency, timeouts, and context propagation (#45)

2026-05-26 14:29:34 +01:00

handlers_data.go

fix: prevent MCP server hanging by adding concurrency, timeouts, and context propagation (#45)

2026-05-26 14:29:34 +01:00

handlers_import_export.go

Make things 'betterer' across the board (#23)

2026-01-11 01:51:20 +00:00

handlers_patterns.go

Release dec 2025 (#15)

2025-12-19 17:57:11 +00:00

handlers_relations.go

fixup! chore: update marketplace for v0.11.37

2026-03-06 15:39:52 +00:00

handlers_scoring.go

fix: bound SQLite WAL growth and prevent worker hangs (#49)

2026-06-01 16:40:27 +01:00

handlers_sessions.go

style: apply gofmt

2026-06-19 14:26:36 +01:00

handlers_test.go

test: add regression tests for #45 hang fixes

2026-05-26 14:29:34 +01:00

handlers_update.go

fix(lint): clear the staticcheck findings

2026-10-03 05:00:27 +01:00

handlers.go

fixup! chore: update marketplace for v0.11.37

2026-03-06 15:39:52 +00:00

middleware_test.go

Make things 'betterer' across the board (#23)

2026-01-11 01:51:20 +00:00

middleware.go

fix(worker): harden HTTP server (loopback bind, token auth, constant-time compare)

2026-06-19 14:26:34 +01:00

ratelimit_test.go

fix(worker): key rate limiter on peer IP, not forged headers

2026-10-03 12:02:17 +01:00

ratelimit.go

fix(worker): key rate limiter on peer IP, not forged headers

2026-10-03 12:02:17 +01:00

service.go

fix(worker): key rate limiter on peer IP, not forged headers

2026-10-03 12:02:17 +01:00

static.go

refactor(worker): lazy-init embedded static assets via sync.OnceValues

2026-06-19 14:26:34 +01:00

testhelpers_test.go

general improvements (#17)

2026-01-07 00:26:20 +00:00