openhands f0c27eb815 feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS ...

- resolveClientIp: trust cf-connecting-ip only behind cf-ray/cdn-loop, use nginx x-real-ip otherwise (anti-spoof)
- antiddos-config: Redis-backed live config (antiddos:config) with 30s cache, 13 ANTI_DDOS_* env vars
- ddos-guard: consume tunable rates/tiers via getAntiddosConfig
- admin panel at /admin/devops/antiddos (save/reset/unban actions, PERMS.SETTINGS_VIEW)
- register new admin page in housekeeping migration matrix (146 -> 147)

2026-09-22 22:22:51 +02:00

..

actions

feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS

2026-09-22 22:22:51 +02:00

app

feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS

2026-09-22 22:22:51 +02:00

components

feat(nitro-cleanup): make delete button visible

2026-09-20 16:54:41 +02:00

db

fix: resolve all biome lint and TypeScript errors in test files

2026-09-21 18:37:39 +02:00

features

feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS

2026-09-22 22:22:51 +02:00

hooks

fix(hk): protect unsaved editors and await prefix save results

2026-09-11 10:48:34 +02:00

i18n

feat: add CSV/JSON export, advanced bulk filters & selection to Catalog Manager

2026-09-12 20:40:33 +02:00

lib

feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS

2026-09-22 22:22:51 +02:00

messages

feat(referrals): add referral attribution and daily login rewards

2026-09-20 12:29:01 +02:00

test

lint: fix biome issues in new test files and helpers

2026-09-21 18:19:39 +02:00

types

Improve catalog studio UX and aggressive docker cleanup

2026-09-14 16:52:04 +02:00

env.ts

feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS

2026-09-22 22:22:51 +02:00

instrumentation-client.ts

feat(admin): add production error center and refresh CMS dependencies

2026-09-05 19:53:09 +02:00

instrumentation.ts

feat(catalog): queue furniture imports with history and matching file attachments

2026-09-05 17:02:26 +02:00

proxy.ts

feat(security): harden anti-DDoS gate with scanner triage, tiered blocks and in-process global halt

2026-09-22 21:57:09 +02:00

test-repair-icons.test.ts

fix: skip icon-repair integration test when no DB is configured

2026-08-03 17:47:07 +02:00