sneak 930e4eb026 test: assert http.Server carries ReadHeaderTimeout and IdleTimeout ...

Failing test first: the server-hardening policy requires a slowloris
defense (ReadHeaderTimeout) and a keep-alive bound (IdleTimeout) on the
http.Server, neither of which is set today. The test asserts every
timeout field is wired onto the constructed server.

Model: opus-4-8

2026-09-21 18:22:22 +00:00

..

allowlist

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

config

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

database

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

encurl

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

globals

Consolidate appname to internal/globals as a constant (#34)

2026-03-20 07:04:54 +01:00

handlers

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

healthcheck

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

httpfetcher

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78)

2026-09-21 19:59:26 +02:00

imageprocessor

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

imgcache

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

logger

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

magic

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

middleware

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

seal

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

server

test: assert http.Server carries ReadHeaderTimeout and IdleTimeout

2026-09-21 18:22:22 +00:00

session

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

signature

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

static

Add static files and HTML templates for web UI

2026-01-08 07:38:09 -08:00

templates

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00