Fix medium-severity audit findings across all modules#12

Merged

ConsoleTVs merged 13 commits into

mainfrom

fix/medium-severity-audit-findings

Apr 12, 2026

Commits on Apr 12, 2026

fix(contract): harden request/response helpers and add Rehashable interface
ConsoleTVs
committed
fix(router): reject path traversal patterns and validate empty methods
ConsoleTVs
committed
fix(problem): stable JSON field ordering, wildcard accept, and slash boundary matching
ConsoleTVs
committed
fix(framework): harden core handler, server, and hooks writer
ConsoleTVs
committed
fix(framework/middleware): improve CORS, logger, rate limiter, recover, and secure headers
ConsoleTVs
committed
fix(framework/session): enforce expiry, fix defaults, and improve persistence
ConsoleTVs
committed
fix(framework/cache): simplify memory locking, fix error handling, and add docs
ConsoleTVs
committed
fix(framework/crypto): add ErrEncrypterClosed, nil-safe Close, and key zeroing
ConsoleTVs
committed
fix(framework/hash): export bcrypt cost, add NeedsRehash, and improve zeroing
ConsoleTVs
committed
fix(framework/database): use direct queries, document pool limits, fix sqlTx Close
ConsoleTVs
committed
fix(framework/event): add shared event validation and document wildcard semantics
ConsoleTVs
committed
chore(framework): update go.mod dependencies
ConsoleTVs
committed
Merge remote-tracking branch 'origin/main' into fix/medium-severity-audit-findings
ConsoleTVs
committed