samsa/internal/middleware
Franz Kafka b3e3123612 security: fix build errors, add honest Google UA, sanitize error msgs
- Fix config validation: upstream URLs allow private IPs (self-hosted)
- Fix util.SafeURLScheme to return parsed URL
- Replace spoofed GSA User-Agent with honest Kafka UA
- Sanitize all engine error messages (strip response bodies)
- Replace unused body reads with io.Copy(io.Discard, ...) for reuse
- Fix pre-existing braveapi_test using wrong struct type
- Fix ratelimit test reference to limiter variable
- Update ratelimit tests for new trusted proxy behavior
2026-03-22 16:27:49 +00:00
..
cors.go security: harden against SAST findings (criticals through mediums) 2026-03-22 16:22:27 +00:00
cors_test.go feat: add CORS and rate limiting middleware 2026-03-21 15:54:52 +00:00
ratelimit.go security: fix build errors, add honest Google UA, sanitize error msgs 2026-03-22 16:27:49 +00:00
ratelimit_burst_test.go feat: add global and burst rate limiters 2026-03-21 18:35:31 +00:00
ratelimit_global.go security: harden against SAST findings (criticals through mediums) 2026-03-22 16:22:27 +00:00
ratelimit_global_test.go feat: add global and burst rate limiters 2026-03-21 18:35:31 +00:00
ratelimit_test.go security: fix build errors, add honest Google UA, sanitize error msgs 2026-03-22 16:27:49 +00:00
security.go security: harden against SAST findings (criticals through mediums) 2026-03-22 16:22:27 +00:00