- Check(): single GeoIP LookupCountry call, result reused for both deny and allow checks. Removed goto label for structured flow. - getClientIP(): single trusted proxy CIDR scan gates both X-Forwarded-For and X-Real-IP processing.
- Check(): single GeoIP LookupCountry call, result reused for both deny and allow checks. Removed goto label for structured flow. - getClientIP(): single trusted proxy CIDR scan gates both X-Forwarded-For and X-Real-IP processing.