MechaCat02 f2c9cfe162 test: cover the trusted_proxy X-Forwarded-For rate-limit gate ...

Two integration tests pinning both sides of the gate: trusted_proxy=true gives
each forwarded IP its own bucket; trusted_proxy=false ignores spoofed XFF and
shares the global bucket. Closes audit gap M7. Test-only, no behavior change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-13 21:13:37 +02:00

27 KiB

Raw Blame History

View Raw