sneak/prompts
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

Add HTTP service hardening policy for 1.0 releases #17

Merged
sneak merged 3 commits from feature/http-service-hardening-policy into main 2026-03-11 02:11:33 +01:00
Conversation 6 Commits 3 Files Changed 2
+78 -2
3 Commits
Author SHA1 Message Date
user 6be01ea81f fix: clarify TLS policy — services never terminate TLS directly
check / check (push) Successful in 5s
Details 
Our services always sit behind a TLS-terminating reverse proxy and
listen on plain HTTP. Updated the TLS subsection to state this as
policy rather than presenting it as one of two options.
 2026-03-10 18:07:18 -07:00
clawbot 32cfb84831 remove HTTP hardening checklist from NEW_REPO_CHECKLIST.md
check / check (push) Successful in 5s
Details 
New repos aren't HTTP services at creation time — these items only
make sense in EXISTING_REPO_CHECKLIST.md (for 1.0 prep) and in the
policy itself (REPO_POLICIES.md).
 2026-03-10 18:04:47 -07:00
user 2946dd2f14 add HTTP service hardening policy for 1.0 releases
check / check (push) Successful in 5s
Details 
Add comprehensive security hardening requirements to REPO_POLICIES.md
that HTTP/web services must satisfy before tagging 1.0. Covers security
headers (HSTS, CSP, XFO, X-Content-Type-Options, Referrer-Policy,
Permissions-Policy), request/response limits, slowloris timeouts, rate
limiting on password auth, CSRF, session cookie security, reverse proxy
IP detection, CORS restrictions, and error handling.

Also add corresponding checklist sections to EXISTING_REPO_CHECKLIST.md
and NEW_REPO_CHECKLIST.md for verification during repo setup.
 2026-03-10 17:47:59 -07:00