Marc Mintel
99467f1379
Build & Deploy / 🔍 Prepare (push) Successful in 19s
Build & Deploy / 🧪 QA (push) Successful in 1m17s
Build & Deploy / 🏗️ Build (push) Successful in 2m33s
Build & Deploy / 🚀 Deploy (push) Successful in 25s
Build & Deploy / 🧪 Post-Deploy Verification (push) Successful in 51s
Build & Deploy / 🔔 Notify (push) Successful in 2s
fix(antispam): harden spam guard with signed form tokens and proxy-safe IP extraction
...
- Rate limit now uses the last X-Forwarded-For hop (appended by Traefik)
instead of the client-controlled first hop, which bots rotated freely
- Time-trap anchored to server time via HMAC-signed form token
(FORM_TOKEN_SECRET) instead of client-supplied form_loaded_at
- Fix RequestQuoteForm regression: FormData was built from scratch without
honeypot/token hidden inputs and inputs lacked name attributes, so every
legitimate quote request was silently blocked as spam
2026-09-02 10:06:07 +02:00
..
2026-07-17 15:19:27 +02:00
2026-06-26 09:53:12 +02:00
2026-08-13 00:55:00 +02:00
2026-05-15 09:04:37 +02:00
2026-06-29 18:58:32 +02:00
2026-06-19 19:03:37 +02:00
2026-09-02 10:06:07 +02:00
2026-06-23 12:18:54 +02:00
2026-07-10 21:25:19 +02:00
2026-06-30 23:05:31 +02:00
2026-05-28 11:48:21 +02:00
2026-06-19 01:14:33 +02:00
2026-06-26 09:53:12 +02:00
2026-06-19 18:56:14 +02:00
2026-09-02 10:06:07 +02:00
2026-06-12 19:17:13 +02:00
2026-06-23 12:18:54 +02:00
2026-06-23 12:18:54 +02:00
2026-06-30 10:09:45 +02:00
2026-05-13 14:23:24 +02:00
2026-05-28 09:58:34 +02:00
2026-06-26 09:53:12 +02:00
2026-04-28 19:11:38 +02:00
2026-04-28 19:11:38 +02:00
2026-06-22 13:46:50 +02:00
2026-04-28 19:11:38 +02:00
2026-06-23 12:18:54 +02:00
2026-04-28 19:11:38 +02:00
2026-04-28 19:11:38 +02:00
2026-04-28 19:11:38 +02:00
2026-09-02 10:06:07 +02:00
2026-06-20 21:49:59 +02:00
2026-04-28 19:11:38 +02:00
2026-04-28 19:11:38 +02:00
2026-04-28 19:11:38 +02:00