Hein ca89cb8a73 fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or ...

Add a `hardening` config section (RESOLVESPEC_HARDENING_*) so each
fix can be switched off to restore the previous behaviour:

- cors_strict_origins: only reflect origins listed in
  cors.allowed_origins / server URLs, with credentials; `*` never
  sends credentials; fix shared-slice append of expose headers.
- sort_strict: join aliases must match `alias.identifier` (empty alias
  no longer matches everything); sort expressions reject dangerous
  functions/catalogs; cql* columns must be identifier-safe.
- sql_strict: client raw-SQL fragments must have balanced parens and
  quotes, no comments/`;`/`$$`, DML keywords, dangerous functions or
  system catalogs; a rejected fragment now fails closed ("(1=0)")
  instead of dropping the filter. Subqueries stay allowed unless
  sql_block_subqueries is set.
- x-custom-sql-or is grouped together with the client's own
  conditions (new optional WhereGrouper, implemented for bun and gorm)
  so it can no longer OR past server-side filters.

2026-10-01 13:46:01 +02:00

..

cache

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

common

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

config

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

dbmanager

fix(security): reorder import statements for consistency

2026-10-01 09:33:57 +02:00

dbtrace

fix(resolvemcp): single transaction for create/update, hook registry mutex, uniform not-found, bounded SSE host cache

2026-10-01 13:33:11 +02:00

errortracking

fix(errortracking): update error context handling in Sentry

2026-05-21 14:03:01 +02:00

eventbroker

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

funcspec

test(tx): regression tests for per-request transactions across all specs

2026-09-30 23:19:58 +02:00

logger

fix(logger): address audit findings

2026-09-30 13:19:52 +02:00

metrics

refactor(db): remove metrics enabling methods from adapters

2026-04-10 14:13:15 +02:00

middleware

feat(middleware): export clientqueue_enqueued_total counter

2026-09-30 16:16:25 +02:00

modelregistry

fix(modelregistry): address audit findings

2026-09-30 13:26:55 +02:00

mqttspec

feat(security): exclude hidden/masked columns from create and update payloads

2026-09-30 23:48:09 +02:00

openapi

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

reflection

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

resolvemcp

docs(resolvemcp): rewrite README for meta tools, guard and limits; update plan status

2026-10-01 13:42:14 +02:00

resolvespec

fix(restheadspec): handle primary key changes in updates

2026-10-01 10:16:26 +02:00

restheadspec

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

security

fix(resolvemcp): single transaction for create/update, hook registry mutex, uniform not-found, bounded SSE host cache

2026-10-01 13:33:11 +02:00

server

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

spectypes

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

testmodels

fix(delete): run delete hooks and queries in one transaction

2026-09-30 22:33:25 +02:00

tracing

fix(tracing): address audit findings

2026-09-30 13:39:50 +02:00

websocketspec

feat(websocketspec): fire BeforeDisconnect/AfterDisconnect hooks on close

2026-10-01 10:53:21 +02:00