fix(security): hardens auth, XSS, rate limiting, and repo posture#43

Merged

wgordon17 merged 8 commits intogordon-code:mainfrom

wgordon17:fix/security-hardening

Apr 2, 2026

Commits on Apr 2, 2026

fix(security): hardens auth, XSS, rate limiting, and repo posture
wgordon17
committed
fix(security): addresses quality gate findings from domain review
wgordon17
committed
fix(security): restores style-src-attr (corvu/kobalte need it), uses expireToken for cross-tab sync
wgordon17
committed
fix(security): addresses PR review findings with tests
wgordon17
committed
fix(security): removes dead script, adds remaining test coverage
wgordon17
committed
fix(deps): regenerates lockfile for pinned happy-dom, adds lockfile sync hook
wgordon17
committed
refactor(security): extracts CSP hash verification into shared script
wgordon17
committed
perf(waf): parallelizes smoke tests with GNU parallel
wgordon17
committed