notkshitij 0d8b2cdb3f security: add helmet, rate limiting, strict CORS, input sanitization. ...

- Add helmet for secure HTTP response headers.
- Add express-rate-limit: 60 req/min general, 20 req/min on LLM endpoints.
- Restrict CORS to localhost origins in dev, CORS_ORIGIN env var in prod.
- Cap request body at 16kb.
- Add sanitizeText() to strip control chars on all string inputs.
- Add isValidStandardId() regex guard on :id param and standard_id fields.
- All route handlers use sanitized values; no raw req.body/req.query access.

2026-05-02 23:59:33 +05:30

..

bridge

feat: add web server backend.

2026-04-28 23:56:07 +05:30

services

feat: add web server backend.

2026-04-28 23:56:07 +05:30

.env.example

feat: add web server backend.

2026-04-28 23:56:07 +05:30

index.js

security: add helmet, rate limiting, strict CORS, input sanitization.

2026-05-02 23:59:33 +05:30

package-lock.json

security: add helmet, rate limiting, strict CORS, input sanitization.

2026-05-02 23:59:33 +05:30

package.json

security: add helmet, rate limiting, strict CORS, input sanitization.

2026-05-02 23:59:33 +05:30

start.js

feat: add web server backend.

2026-04-28 23:56:07 +05:30