From Dev.to
One forged header switched off our per-IP rate limit
Our website's AI chat limited requests per IP, but one forged header made every request look like a new visitor. The chat is on our outsourcing page. A visitor describes a project and gets a rough est...