From aaac300cc4b2b6194a873c081272762fb8f60fd8 Mon Sep 17 00:00:00 2001
From: anti <samuel@securejump.cl>
Date: Fri, 24 Apr 2026 18:26:35 -0400
Subject: [PATCH] tweak(web/ip-leaks): show only 1 IP inline, rest via + N more

Five was still too loud on AttackerDetail when rotation is in play.
One inline is enough to read at a glance; everything else goes
behind the expand button. Rotation tag keeps carrying the count so
no signal is lost.
---
 decnet_web/src/components/AttackerDetail.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/decnet_web/src/components/AttackerDetail.tsx b/decnet_web/src/components/AttackerDetail.tsx
index 045d2029..93c1bd10 100644
--- a/decnet_web/src/components/AttackerDetail.tsx
+++ b/decnet_web/src/components/AttackerDetail.tsx
@@ -837,7 +837,7 @@ const Section: React.FC<{
 // ─── Leaked-IPs row (truncated view + rotation-detection badge) ────────────
 
 const ROTATION_THRESHOLD = 20;
-const INLINE_LIMIT = 5;
+const INLINE_LIMIT = 1;
 
 interface LeakedIPsRowProps {
   leaks: NonNullable<AttackerData['ip_leaks']>;