Kharec dccf85e038 fix(middleware): return *uint from GetUserIDFromContext for nil when unauthenticated

2026-05-06 20:07:41 +02:00

..

auth_test.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

auth.go

fix(middleware): return *uint from GetUserIDFromContext for nil when unauthenticated

2026-05-06 20:07:41 +02:00

cache_test.go

refactor: go fix ftw

2026-02-19 17:37:42 +01:00

cache.go

fix: preserve security headers on cache hits

2025-12-26 17:33:12 +01:00

compression_test.go

test: verify DecompressionMiddleware enforces size limit

2026-04-23 13:26:15 +02:00

compression.go

fix: cap decompressed request body side to prevent DoS

2026-04-23 13:26:03 +02:00

cors_test.go

test(middleware): CORS wildcard+credentials panic and trimmed env origins

2026-05-06 20:06:55 +02:00

cors.go

fix(middleware): validate CORS origins and reject wildcard with credentials

2026-05-06 20:06:53 +02:00

csrf_test.go

test(middleware): expect CSRF cookie readable by script for header submit

2026-05-06 20:07:35 +02:00

csrf.go

fix(middleware): set CSRF cookie HttpOnly false for double-submit from JS

2026-05-06 20:07:00 +02:00

db_monitoring_test.go

refactor: go fix ftw

2026-02-19 17:37:42 +01:00

db_monitoring.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

logging_test.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

logging.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

ratelimit_test.go

refactor: go fix ftw

2026-02-19 17:37:42 +01:00

ratelimit.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

request_size_test.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

request_size.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

security_headers_test.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

security_headers.go

To gitea and beyond, let's go(-yco)

2025-11-10 19:12:09 +01:00

security_logging_test.go

test(middleware): lock rapid-request tracker reset in TestIsRapidRequest

2026-05-06 16:47:46 +02:00

security_logging.go

fix(middleware): add mutex for rapid-request counter

2026-05-06 16:47:35 +02:00

validation_test.go

refactor: go fix ftw

2026-02-19 17:37:42 +01:00

validation.go

fix: update ValidationMiddleware to return a JSON error response when JSON decoding fails

2025-11-23 21:42:27 +01:00