2 Commits

Author	SHA1	Message	Date
Jakub Zych	30539b954f	feat(06-03): add path-scoped CORS and per-route body limits ... - CORS matches Laravel path globs (api/* includes nested segments); unlisted paths get no headers - Non-raw routes wrap http.MaxBytesReader from http.body_limits.default_bytes; body.limit:N overrides innermost - Raw routes stay uncapped at this layer	2026-09-19 20:10:02 +02:00
Jakub Zych	92255a46ed	test(03-04): cover framework database, routing and JWT boundaries ... - Shared pgx/GORM pool, ICU locale fail, and isolated plugin migrations - Seven-stage middleware order, missing-guard boot failure, typed 404s - Adversarial JWT matrix including alg:none, empty secret, and no leak Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-17 20:29:46 +02:00