senke/veza
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
veza/veza-backend-api/internal/handlers
History
senke d3bcfd8e60 [BE-SEC-009] be-sec: Implement input sanitization 
- Created comprehensive sanitization utility functions
- SanitizeInput, SanitizeText, SanitizeHTML, SanitizeURL, SanitizeEmail, SanitizeUsername
- Applied sanitization to profile handler (username, bio, names, search)
- Applied sanitization to social posts content
- Applied sanitization to comment content
- Applied sanitization to playlist titles and descriptions
- All functions prevent XSS via HTML escaping and remove dangerous URL schemes
- Removes control characters and limits input length to prevent DoS
2025-12-24 12:15:25 +01:00
..
analytics_handler.go stabilizing veza-backend-api: LAST REMEDIATION 2025-12-16 14:07:36 -05:00
api_flow_test.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
audit.go [BE-API-034] be-api: Implement audit log search improvements 2025-12-24 11:56:57 +01:00
auth.go [INT-003] integration: Fix auth/login response format mismatch 2025-12-23 01:44:54 +01:00
auth_handler_test.go.bak adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
avatar_handler.go [BE-API-022] be-api: Implement avatar delete endpoint 2025-12-24 11:36:15 +01:00
bitrate_handler.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
bitrate_handler_test.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
chat_handler.go [BE-API-006] be-api: Implement chat stats endpoint 2025-12-23 01:51:49 +01:00
chat_handler_test.go refonte: backend-api go first; phase 1 2025-12-12 21:34:34 -05:00
comment_handler.go [BE-SEC-009] be-sec: Implement input sanitization 2025-12-24 12:15:25 +01:00
common.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
config_reload.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
csrf.go fix(MVP-006): Standardize environment variable names (VITE_API_BASE_URL → VITE_API_URL) 2025-12-22 22:56:37 +01:00
error_contract_test.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
error_response.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
health.go refonte: backend-api go first; phase 1 2025-12-12 21:34:34 -05:00
health_p1_test.go refonte: backend-api go first; phase 1 2025-12-12 21:34:34 -05:00
health_test.go refonte: backend-api go first; phase 1 2025-12-12 21:34:34 -05:00
hls_handler.go [BE-API-020] be-api: Implement HLS stream info endpoint 2025-12-24 11:32:50 +01:00
marketplace.go stabilizing veza-backend-api: P1 & P2 2025-12-16 13:34:08 -05:00
metrics.go adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
metrics_aggregated.go adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
metrics_aggregated_test.go adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
metrics_test.go.disabled fix(backend-tests): enable room_handler_test and resolve metric collisions 2025-12-06 12:53:15 +01:00
notification_handlers.go [BE-API-016] be-api: Implement notifications endpoints 2025-12-24 11:23:24 +01:00
oauth_handlers.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
password_reset_handler.go stabilizing veza-backend-api: P1 & P2 2025-12-16 13:34:08 -05:00
playback_analytics_handler.go stabilizing veza-backend-api: P1 & P2 2025-12-16 13:34:08 -05:00
playback_websocket_handler.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
playlist_collaboration_integration_test.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
playlist_error_helper.go adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
playlist_error_helper_test.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
playlist_export_handler.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
playlist_handler.go [BE-SEC-009] be-sec: Implement input sanitization 2025-12-24 12:15:25 +01:00
playlist_handler_integration_test.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
playlist_handlers_test.go.bak adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
playlist_track_handler_integration_test.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
profile_handler.go [BE-SEC-009] be-sec: Implement input sanitization 2025-12-24 12:15:25 +01:00
profile_handler_integration_test.go [BE-API-002] api: Implement playlist collaborators endpoints 2025-12-23 01:41:43 +01:00
profile_handler_test.go.disabled fix(backend-tests): enable room_handler_test and resolve metric collisions 2025-12-06 12:53:15 +01:00
response.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
role_handler.go [BE-API-008] be-api: Implement user search endpoint 2025-12-23 10:42:26 +01:00
room_handler.go [BE-API-012] be-api: Implement conversation update endpoint 2025-12-23 10:51:18 +01:00
room_handler_test.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
search_handlers.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
session.go [BE-API-031] be-api: Implement session stats endpoint 2025-12-24 11:48:43 +01:00
settings_handler.go stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
social.go [BE-SEC-009] be-sec: Implement input sanitization 2025-12-24 12:15:25 +01:00
status_handler.go STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
system_metrics.go adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
system_metrics_test.go.disabled fix(backend-tests): enable room_handler_test and resolve metric collisions 2025-12-06 12:53:15 +01:00
track_handler_test.go.bak adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
two_factor_handler.go [BE-API-002] api: Implement playlist collaborators endpoints 2025-12-23 01:41:43 +01:00
upload.go [BE-API-032] be-api: Implement upload stats endpoint 2025-12-24 11:52:49 +01:00
validation_test.go refonte: backend-api go first; phase 1 2025-12-12 21:34:34 -05:00
webhook_handlers.go [BE-API-033] be-api: Implement webhook stats endpoint validation 2025-12-24 11:54:22 +01:00