feat(security): comprehensive security hardening and validation#143

Merged

jjacque merged 26 commits intomasterfrom

ai-sec-enhancement

Jan 19, 2026

Commits on Jan 1, 2026

chore: update godoc comments
jjacque
committed
docs: enhance README structure and content
jjacque
committed
docs: update copilot instructions with latest repo state
jjacque
committed

Commits on Jan 2, 2026

fix(ci): golangci-lint is already part of the cimg/go image
jjacque
committed
ci: add golangci-lint config with concurrency limit
jjacque
committed
Add comprehensive AWS deployment guide

authored and
jjacque
committed
docs: enhance README structure and content
jjacque
committed
chore: early check of TTL and message validity
jjacque
committed
chore: increase security using CORS middleware
jjacque
committed
chore(server): fine tune RateLimiter middleware
jjacque
committed
chore(server): fine tune Secure middleware
jjacque
committed
refacto(server): move middleware and route setup to dedicated functions
jjacque
committed
chore(server): reduce slowloris dos attack risk by setting proper timeout
jjacque
committed
chore(handlers): add more check for CreateMsg user inputs
jjacque
committed
chore(handlers): do not expose internal error to clients
jjacque
committed
test(handlers): improve CreateMsgHandler and utilities coverage
jjacque
committed
fix(handlers): check real filename validity
jjacque
committed
test(handlers): test CreateMsgHandler with real file upload
jjacque
committed
test(server): add basic routes and middlewares tests
jjacque
committed
test(config): add basic LoadConfig test
jjacque
committed
test(vault): test storage error
jjacque
committed
refactor(server): add graceful shutdown and improve testability
jjacque
committed
refactor(main): adopt NewServer API with graceful shutdown
jjacque
committed
chore: enforce container / compose security
jjacque
committed
chore(handlers): validate token (user input) format when retrieving message from vault
jjacque
committed
tests: update secret token formats, test invalid format in tests for GetMsgHandler
jjacque
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(security): comprehensive security hardening and validation#143

feat(security): comprehensive security hardening and validation#143
jjacque merged 26 commits intomasterfrom
ai-sec-enhancement

Commits on Jan 1, 2026

chore: update godoc comments

docs: enhance README structure and content

docs: update copilot instructions with latest repo state

Commits on Jan 2, 2026

fix(ci): golangci-lint is already part of the cimg/go image

ci: add golangci-lint config with concurrency limit

Add comprehensive AWS deployment guide

docs: enhance README structure and content

chore: early check of TTL and message validity

chore: increase security using CORS middleware

chore(server): fine tune RateLimiter middleware

chore(server): fine tune Secure middleware

refacto(server): move middleware and route setup to dedicated functions

chore(server): reduce slowloris dos attack risk by setting proper timeout

chore(handlers): add more check for CreateMsg user inputs

chore(handlers): do not expose internal error to clients

test(handlers): improve CreateMsgHandler and utilities coverage

fix(handlers): check real filename validity

test(handlers): test CreateMsgHandler with real file upload

test(server): add basic routes and middlewares tests

test(config): add basic LoadConfig test

test(vault): test storage error

refactor(server): add graceful shutdown and improve testability

refactor(main): adopt NewServer API with graceful shutdown

chore: enforce container / compose security

chore(handlers): validate token (user input) format when retrieving message from vault

tests: update secret token formats, test invalid format in tests for GetMsgHandler