fix: address all MEDIUM tier security vulnerabilities (#13-#32)#5

Merged

ConsoleTVs merged 16 commits into

mainfrom

fix/medium-security-vulnerabilities

Apr 11, 2026

Commits on Apr 10, 2026

fix(router): remove TRACE/CONNECT from allMethods and document middleware ordering
ConsoleTVs
committed
fix(framework): harden recover middleware against info leaks and unbounded reads
ConsoleTVs
committed
fix(problem): strip query string from Instance field and document ServeHTTPDev
ConsoleTVs
committed
fix(framework): add session max lifetime, error handler, and security docs
ConsoleTVs
committed
fix(framework): document potential sensitive data exposure in logger middleware
ConsoleTVs
committed
fix(framework): prevent corrupted response on partial-write handler errors
ConsoleTVs
committed
fix(framework): document InsecureSkipVerify risk in NATS TLS config
ConsoleTVs
committed
fix(framework): document thundering herd risk in cache Remember methods
ConsoleTVs
committed
fix(framework): document missing default query timeouts in SQL database
ConsoleTVs
committed
fix(framework): document rate limiting requirement for hash operations
ConsoleTVs
committed
fix(framework): remove double-decrement in AMQP subscriber goroutine
ConsoleTVs
committed
fix(framework): use context.WithoutCancel for MQTT unsubscribe
ConsoleTVs
committed
fix(contract): add StrictJSON variant that rejects unknown fields
ConsoleTVs
committed
fix(framework): add CORS middleware with configurable options
ConsoleTVs
committed
ci: use go workspace for cross-module test resolution
ConsoleTVs
committed

Commits on Apr 11, 2026

Merge remote-tracking branch 'origin/main' into fix/medium-security-vulnerabilities
ConsoleTVs
committed