Sorry to hear about your difficulties getting good answers from support. I will pass along your feedback. > Even though the worker modifies the contents, the I

Sorry to hear about your difficulties getting good answers from support. I will pass along your feedback. > Even though the worker modifies the contents, the IP is passed through as the end-user IP (at least the way we use them). That should only be true when your own worker makes a request to your own origin. It should never be true for requests coming from someone else's worker. Again, please file a security report if you found a case where that is happening.