alexferl / zerohttp / 22877421491

94%

Build Type

push

github

Committed by web-flow

Commit Message

fix: security hardening and reliability improvements (#50)

* fix: security hardening and reliability improvements

Replace panic-based error handling with graceful fallbacks
- ProblemDetail errors now fall back to plain text response
- Removed panics from circuit breaker, rate limiter, and timeout middleware

Fix CSRF token generation to fail closed
- generateToken() now returns error on rand.Read failure
- Prevents CSRF bypass when random generation fails

Add HMAC secret key length validation
- Enforce minimum 32 bytes for HS256 secrets
- Enforce 32/48/64 bytes for SHA256/384/512 respectively

Fix ETag middleware double-write bug
- Add finalized flag to prevent duplicate response writes
- Occurred when Flush() was called during response rendering

Update tests to use properly sized secrets

Signed-off-by: alexferl <me@alexferl.com>

* increase test coverage

Signed-off-by: alexferl <me@alexferl.com>

* increase test coverage

Signed-off-by: alexferl <me@alexferl.com>

* add test coverage

Signed-off-by: alexferl <me@alexferl.com>

* remove notes

Signed-off-by: alexferl <me@alexferl.com>

---------

Signed-off-by: alexferl <me@alexferl.com>

Coverage Stats

49 of 50 new or added lines in 8 files covered. (98.0%)

3 existing lines in 2 files now uncovered.

7790 of 8358 relevant lines covered (93.2%)

30.38 hits per line