Bernt 8921fd1467 security: Fix critical security vulnerabilities ...

- Remove secrets from Git (.env)
- Remove debug token endpoint
- Fix login to reject unauthorized access in production
- Remove HS256 fallback in JWT validation (RS256 only)
- Fix SQL injection in journal.go countQuery
- Fix CORS to use explicit origins only (no wildcard)
- Add security headers middleware (CSP, HSTS, etc.)
- Add input validation helpers
- Build successful

2026-08-10 11:26:58 +00:00

..

config_test.go

LINUS ROUND 1: Delete dead code (rust/c), generic Store[T], tests, slim main.go

2026-07-14 12:31:55 +00:00

config.go

security: Fix critical security vulnerabilities

2026-08-10 11:26:58 +00:00