fix(security): hardens auth, XSS, rate limiting, and repo posture - #43

Merged

wgordon17 merged 8 commits into

gordon-code:mainfrom

wgordon17:fix/security-hardening

Apr 2, 2026

Commits on Apr 2, 2026

fix(security): hardens auth, XSS, rate limiting, and repo posture
wgordon17
committed
224a91f
fix(security): addresses quality gate findings from domain review
wgordon17
committed
92506c8
fix(security): restores style-src-attr (corvu/kobalte need it), uses expireToken for cross-tab sync
wgordon17
committed
d62bc62
fix(security): addresses PR review findings with tests
wgordon17
committed
18f4c32
fix(security): removes dead script, adds remaining test coverage
wgordon17
committed
f710dee
fix(deps): regenerates lockfile for pinned happy-dom, adds lockfile sync hook
wgordon17
committed
a005ceb
refactor(security): extracts CSP hash verification into shared script
wgordon17
committed
9222965
perf(waf): parallelizes smoke tests with GNU parallel
wgordon17
committed
3b69689