Initial public release: Nym-native anonymous submission system

End-to-end verified pipeline (browser -> HTTP relay -> Nym mixnet -> reader).
Client-side X25519+HKDF+AES-GCM-256, no-log blind relay, AGPL-3.0.

1 files changed, 15 insertions, 0 deletions

diff --git a/internal/nolog/middleware.go b/internal/nolog/middleware.go
new file mode 100644
index 0000000..c11ed55
--- /dev/null
+++ b/internal/nolog/middleware.go
@@ -0,0 +1,15 @@
+package nolog
+
+import "net/http"
+
+// Strip all identifying information from every request before any handler sees it.
+func Middleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		r.Header.Del("X-Forwarded-For")
+		r.Header.Del("X-Real-IP")
+		r.Header.Del("User-Agent")
+		r.Header.Del("Referer")
+		r.RemoteAddr = "0.0.0.0:0"
+		next.ServeHTTP(w, r)
+	})
+}