sneak 930e4eb026 test: assert http.Server carries ReadHeaderTimeout and IdleTimeout ...

Failing test first: the server-hardening policy requires a slowloris
defense (ReadHeaderTimeout) and a keep-alive bound (IdleTimeout) on the
http.Server, neither of which is set today. The test asserts every
timeout field is wired onto the constructed server.

Model: opus-4-8

2026-09-21 18:22:22 +00:00

..

http_internal_test.go

test: assert http.Server carries ReadHeaderTimeout and IdleTimeout

2026-09-21 18:22:22 +00:00

http.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

routes.go

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

server.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00