Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
InternalsArea: what it touches
ImprovementsKind: in v2.1.261,
ImprovementsSection of the release
The function that resolves the real client IP from X-Forwarded-For against a trusted proxy list now returns a structured result including a badHop field (truncated to 100 characters) when a hop in the chain can't be parsed as an IP, rather than silently falling back to the untrusted original address.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeFixed Claude apps gateway client IP when a trusted proxy appends a port to X-Forwarded-For; with an access list set, an unreadable entry now…
