NGINX
Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For Spoofing
09/15/2026
Define the intended reverse-proxy chain, reject untrusted forwarding headers and block unauthorized direct-origin access. Plan allowed and denied path tests while keeping client IP attribution separate from user authentication.
Media API Keys in Access Logs: Check for Exposure and Rotate Safely
09/13/2026
Trace where media API keys may persist in URLs, logs, support bundles and backups. Search without exposing secrets, restrict original evidence, share redacted copies and rotate affected credentials across dependent integrations.