Fix high-severity security vulnerabilities#4

Merged

ConsoleTVs merged 13 commits into

mainfrom

fix/high-security-vulnerabilities

Apr 10, 2026

Commits on Apr 10, 2026

fix(problem): stop leaking internal error messages to clients
ConsoleTVs
committed
fix(framework): route errors through wrapped writer and use atomic.Bool
ConsoleTVs
committed
feat(framework): add NewServer with secure timeout defaults
ConsoleTVs
committed
feat(framework): add SecureHeaders middleware
ConsoleTVs
committed
feat(framework): add RateLimit middleware
ConsoleTVs
committed
fix(contract): add SafeRedirect to prevent open redirect attacks
ConsoleTVs
committed
fix(contract): add TryHooks and document panic behavior
ConsoleTVs
committed
fix(framework): bound goroutines and track deliveries in MemoryBroker
ConsoleTVs
committed
refactor(framework): use var for default options and extract helpers
ConsoleTVs
committed
refactor(framework): apply naming conventions to new code
ConsoleTVs
committed
refactor(framework): align naming with updated Go conventions
ConsoleTVs
committed
refactor: apply descriptive naming conventions across codebase
ConsoleTVs
committed
Merge branch 'main' into fix/high-security-vulnerabilities
ConsoleTVs
authored