Go to file
wbtiger 0d1775b5cc fix: address review findings — sliding window, 429 status, remove dead logRequest, add tests
Fixes from adversarial review (17 confirmed findings):
- F1/F6: Replace unbounded counter with 60s sliding window (timestamps with eviction)
- F3/F8: Remove undefined logRequest call and its empty catch block
- F7: Stop echoing unsanitized userId in response (XSS vector)
- F14: Return HTTP 429 instead of 200 on rate limit
- F13: Export reset() for test isolation
- F2/F4/F5/F10/F11/F12: Add boundary, multi-user, and status code tests to smoke.test.js
2026-07-12 13:34:07 +08:00
.gc chore: add validator with smoke test 2026-07-12 13:27:54 +08:00
README.md feat: add test line for PR verification 2026-07-12 02:35:12 +08:00
package.json chore: add validator with smoke test 2026-07-12 13:27:54 +08:00
ratelimit.js fix: address review findings — sliding window, 429 status, remove dead logRequest, add tests 2026-07-12 13:34:07 +08:00
smoke.test.js fix: address review findings — sliding window, 429 status, remove dead logRequest, add tests 2026-07-12 13:34:07 +08:00
validator.js chore: add validator with smoke test 2026-07-12 13:27:54 +08:00

README.md

gc-devops-test

line for pr