czlonkowski 06cbb40213 feat: implement security audit fixes - rate limiting and SSRF protection (Issue #265 PR #2) ...

This commit implements HIGH-02 (Rate Limiting) and HIGH-03 (SSRF Protection)
from the security audit, protecting against brute force attacks and
Server-Side Request Forgery.

Security Enhancements:
- Rate limiting: 20 attempts per 15 minutes per IP (configurable)
- SSRF protection: Three security modes (strict/moderate/permissive)
- DNS rebinding prevention
- Cloud metadata blocking in all modes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-10-06 15:40:07 +02:00

..

command-injection-prevention.test.ts

security: fix CRITICAL timing attack and command injection vulnerabilities (Issue #265)

2025-10-06 14:09:06 +02:00

rate-limiting.test.ts

feat: implement security audit fixes - rate limiting and SSRF protection (Issue #265 PR #2)

2025-10-06 15:40:07 +02:00