Never relay a browser-set X-God-Mode-Active

Shipped

October 14, 2026 at 4:19 PM UTC

Author

Kamo

Commit

b5b62ff

God mode is SERVER-owned. The billing and LOS proxies copied the browser's X-God-Mode-Active onto the upstream call, and BillingService treated it plus users.is_god as god mode with no window or expiry. Both proxies now drop it; the billing proxy forwards the caller's *** session id (X-***-Token) so BillingService reads the real, time-boxed window itself.