kafka/internal
Franz Kafka b3e3123612 security: fix build errors, add honest Google UA, sanitize error msgs
- Fix config validation: upstream URLs allow private IPs (self-hosted)
- Fix util.SafeURLScheme to return parsed URL
- Replace spoofed GSA User-Agent with honest Kafka UA
- Sanitize all engine error messages (strip response bodies)
- Replace unused body reads with io.Copy(io.Discard, ...) for reuse
- Fix pre-existing braveapi_test using wrong struct type
- Fix ratelimit test reference to limiter variable
- Update ratelimit tests for new trusted proxy behavior
2026-03-22 16:27:49 +00:00
..
autocomplete refactor: clean up verbose and redundant comments 2026-03-22 11:10:50 +00:00
cache license: change from MIT to AGPLv3 2026-03-22 08:27:23 +00:00
config security: fix build errors, add honest Google UA, sanitize error msgs 2026-03-22 16:27:49 +00:00
contracts refactor: clean up verbose and redundant comments 2026-03-22 11:10:50 +00:00
engines security: fix build errors, add honest Google UA, sanitize error msgs 2026-03-22 16:27:49 +00:00
httpapi fix: use single Preferences handler with method check instead of dead POST route 2026-03-22 13:57:32 +01:00
middleware security: fix build errors, add honest Google UA, sanitize error msgs 2026-03-22 16:27:49 +00:00
search security: harden against SAST findings (criticals through mediums) 2026-03-22 16:22:27 +00:00
upstream security: harden against SAST findings (criticals through mediums) 2026-03-22 16:22:27 +00:00
util security: fix build errors, add honest Google UA, sanitize error msgs 2026-03-22 16:27:49 +00:00
views security: harden against SAST findings (criticals through mediums) 2026-03-22 16:22:27 +00:00