fix(security): comprehensive security hardening#2

Open

juliendoclot wants to merge 7 commits intoPAPAMICA:mainfrom

juliendoclot:fix/security-hardening

Commits on Mar 25, 2026

fix(security): remove exposed account_id from wrangler.toml

Vercel
and
claude
committed
feat(security): add security utilities module

Vercel
and
claude
committed
fix(security): add SSRF protection to all external fetch endpoints

Vercel
and
claude
committed
feat(security): apply rate limiting to all API endpoints + add security headers

Vercel
and
claude
committed
fix(security): escape user data in HTML reports + harden batch jobs

Vercel
and
claude
committed
fix(security): input validation, memory caps, safe host header placeholder

Vercel
and
claude
committed
fix(types): add non-null assertion for customPayloads iteration

Vercel
and
claude
committed