(SP: 3)[Security] Harden rate-limit inputs, normalize webhook subjects, and isolate test env#157

Merged

ViktorSvertoka merged 3 commits into

Jan 18, 2026

Commits on Jan 18, 2026

(SP: 1) [Security] Normalize rate-limit subjects (IPv6 hashing) for analytics-friendly keys
liudmylasovetovs
committed
(SP: 1) [Security] Harden rate-limit subject derivation (trusted IP, IPv6-safe, UA fallback + tests)
liudmylasovetovs
committed
(SP: 1) [Security] Harden rate-limits env parsing + trusted IP model; fix CSRF env leak; unify test IP helper
liudmylasovetovs
committed