sneak a3cfec09df server: assert timeouts on the served http.Server, not just the constructor (closes #120) ...

The timeout tests called newHTTPServer directly, so a Run that built
its http.Server inline would drop every timeout with the suite still
green. TestRunWiresSocketTimeouts wires a Server as cmd/dnswatcher
does, minus the watcher and resolver so no live DNS is touched, drives
Run with an unbindable port so it stores its http.Server and returns
without listening, and checks that server carries all four timeouts
and both required relationships. The addr/handler test, which could
not fail, is dropped.

The ReadTimeout note now says what net/http does: a request whose
headers arrive after ReadTimeout but within ReadHeaderTimeout gets a
read deadline that has already passed, so reading its body fails at
once.

Model: opus-4-8 (implementation); opus-5-5 (rework)

2026-09-28 19:33:04 +00:00

..

export_test.go

server: assert timeouts on the served http.Server, not just the constructor (closes #120)

2026-09-28 19:33:04 +00:00

routes.go

middleware: add security response headers (closes #98)

2026-09-22 00:52:48 +02:00

server_test.go

server: assert timeouts on the served http.Server, not just the constructor (closes #120)

2026-09-28 19:33:04 +00:00

server.go

server: set all four http.Server socket timeouts (#118)

2026-09-09 15:17:43 +02:00