Repository navigation

feat(worker): proxy security hardening — 7-layer defense-in-depth stack - #62

Merged

wgordon17 merged 56 commits into

gordon-code:mainfrom

wgordon17:worktree-proxy-security-hardening

Apr 15, 2026

Commits on Apr 9, 2026
Commits on Apr 12, 2026
- fix(turnstile): harden widget lifecycle
  wgordon17
  committed
  5e6f444
- fix(turnstile): hardens widget lifecycle edge cases
  wgordon17
  committed
  6a9773a
- fix(turnstile): addresses adversarial review findings
  wgordon17
  committed
  721c63d
- fix(turnstile): moves setTimeout above ready() call
  wgordon17
  committed
  28104b1
- feat(worker): adds KAT, fuzz tests, timing-safe verify
  wgordon17
  committed
  e1c9930
Commits on Apr 13, 2026
Commits on Apr 14, 2026
- fix: address 14 PR review findings
  wgordon17
  committed
  712c647
- refactor(worker): reuse crypto.ts base64url helpers in session.ts
  wgordon17
  committed
  dbacd73
- docs(deploy): note WAF exemptions are simplifiable post-deploy
  wgordon17
  committed
  7d788f8
- docs(deploy): removes one-time WAF note
  wgordon17
  committed
  4953c38
- fix: address PR review findings — security docs, tests, code quality
  wgordon17
  committed
  388f442
- fix(mcp): adds production origin to defaults
  wgordon17
  committed
  44efe87
Commits on Apr 15, 2026