Repository navigation

fix: comprehensive audit — 66 security/correctness/performance findings resolved - #25

Merged

aarambh-darshan merged 15 commits into

mainfrom

fix/audit-findings

Aug 23, 2026

Merged

fix: comprehensive audit — 66 security/correctness/performance findings resolved#25
aarambh-darshan merged 15 commits into
mainfrom
fix/audit-findings

Commits on Aug 23, 2026
- fix(router): unknown HTTP methods return 405; HEAD falls back to GET
  
  aarambh-darshan
  and
  claude
  committed
  d1ca531
- fix(security): default body limit + streaming enforcement (audit H1, M14)
  
  aarambh-darshan
  and
  claude
  committed
  71ee44f
- fix(router): preserve sub-router layers in nest/merge (audit H3)
  
  aarambh-darshan
  and
  claude
  committed
  d75694f
- fix(server): accept-loop resilience, TLS handshake timeout, HTTP/1 knobs
  
  aarambh-darshan
  and
  claude
  committed
  9e07312
- fix(middleware): rate limiter rewrite (audit H6, M8, M9)
  
  aarambh-darshan
  and
  claude
  committed
  1b2c689
- fix(middleware): refresh Content-Length after body transforms (audit H7, M13)
  
  aarambh-darshan
  and
  claude
  committed
  1c144df
- fix(static,router): path safety — traversal escapes, TOCTOU, If-Range
  
  aarambh-darshan
  and
  claude
  committed
  01d7733
- fix: lifecycle correctness across server, watchers, otel, ws (group 8)
  
  aarambh-darshan
  and
  claude
  committed
  48d877f
- fix(middleware): auth/CORS hardening (audit M10, M11, L14, L15)
  
  aarambh-darshan
  and
  claude
  committed
  1d5c78c
- perf: hot-path pass — router prebuild, streaming compression, knobs
  
  aarambh-darshan
  and
  claude
  committed
  2e8cef0
- fix: core API panics, SSE injection, config validation, ALPN (group 11)
  
  aarambh-darshan
  and
  claude
  committed
  c702847
- fix: final audit sweep — remaining 20 findings across all crates
  
  aarambh-darshan
  and
  claude
  committed
  728aa8e
- fix(ci): make every CI job green with --all-features -D warnings
  
  aarambh-darshan
  and
  claude
  committed
  3d73521
- ci: add GitHub community files — templates, funding, release notes
  
  aarambh-darshan
  and
  claude
  committed
  40b6f56
- fix(ws): allow result_large_err — tungstenite::Error is part of the API
  
  aarambh-darshan
  and
  claude
  committed
  1dcc679

Commits

Commits on Aug 23, 2026