MBO-Tech-IT a26cc3f8f2 fix: use rightmost X-Forwarded-For entry and add per-email rate-limit dimension ... Fixes an XFF-spoofing bypass of the flyer rate limiter (leftmost entry is attacker-controlled, not proxy-verified) and adds a second rate-limit dimension keyed on the submitted email so spamming one address still gets blocked even if IP-based limiting is ever defeated. Also bounds the in-memory rate-limit Map via a call-count-triggered sweep. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LhY1QhDXGWfyhrxaJvfpNt		2026-07-21 14:21:34 +02:00
..
admin	feat: set MBO-Tech-IT defaults in hero and add CMS links to admin nav	2026-06-02 20:33:37 +02:00
analytics	feat: integrate modules 01–03, 06–07 — email, admin auth, analytics, kunden-portal, statistik	2026-04-27 19:41:05 +02:00
contact	feat: send confirmation email to contact form submitter	2026-04-28 09:12:48 +02:00
familyguard-flyer	fix: use rightmost X-Forwarded-For entry and add per-email rate-limit dimension	2026-07-21 14:21:34 +02:00
kunden	feat: integrate modules 01–03, 06–07 — email, admin auth, analytics, kunden-portal, statistik	2026-04-27 19:41:05 +02:00