trust-boundary 1 X-Forwarded-For Spoofing – Internal Staff Portal Access Control Bypass | Brackish Brewing Co. May 22, 2026