xfy b5c3c0954f fix: address repository review issues ...

Security:
- Enforce client_max_body_size in HTTP/2 and HTTP/3 adapters before buffering
- Use trusted-proxy-aware client IP extraction for access control and rate limiting
- Include Host and Vary headers in proxy cache key to prevent cache poisoning
- Harden static file path traversal check with filepath.Clean + prefix validation
- Honor proxy_ssl config for WebSocket upstream TLS

Proxy/handler bugs:
- Decrement WebSocket connection count immediately on return (not deferred in retry loop)
- Remove ineffective headersPool
- Coalesce concurrent background cache refreshes with singleflight

Dev/build:
- Fix Makefile run and test-config targets
- Remove broken wget healthcheck from docker-compose
- Add missing integration build tags
- Fix go vet warnings in tests

CI:
- Run golangci-lint and integration tests in Gitea Actions

Refs: docs/superpowers/plans/2026-06-17-fix-review-issues.md

2026-06-17 11:17:53 +08:00

..

cache_config.go

fix: address repository review issues

2026-06-17 11:17:53 +08:00

config_test.go

chore: remove trailing blank lines and clean up whitespace

2026-06-03 18:08:34 +08:00

config.go

feat(config): add ${ENV_VAR} interpolation in YAML configuration

2026-06-11 23:41:52 +08:00

defaults_test.go

chore: remove trailing blank lines and clean up whitespace

2026-06-03 18:08:34 +08:00

defaults.go

feat(middleware/cors): add CORS middleware with server-level configuration

2026-06-11 23:41:38 +08:00

env_test.go

feat(config): add ${ENV_VAR} interpolation in YAML configuration

2026-06-11 23:41:52 +08:00

env.go

feat(config): add ${ENV_VAR} interpolation in YAML configuration

2026-06-11 23:41:52 +08:00

load_test.go

fix(config,server): merge defaults on Load and fix monitoring registration

2026-06-11 15:08:57 +08:00

lua_config_test.go

Merge branch 'lint-fix' - resolve sendfile.go conflict

2026-04-13 09:26:48 +08:00

monitoring_config.go

feat(server): add /healthz and /readyz endpoints for Kubernetes probes

2026-06-11 23:41:45 +08:00

performance_config.go

fix: address repository review issues

2026-06-17 11:17:53 +08:00

proxy_config.go

chore: release v0.4.0

2026-06-09 15:59:36 +08:00

security_config.go

feat(middleware/cors): add CORS middleware with server-level configuration

2026-06-11 23:41:38 +08:00

server_config.go

docs(config): add package comments for config module

2026-06-03 15:28:53 +08:00

ssl_config.go

docs(config): add package comments for config module

2026-06-03 15:28:53 +08:00

validate_geoip_test.go

feat(geoip): 添加基于国家代码的 GeoIP 访问控制功能

2026-04-13 16:14:44 +08:00

validate_test.go

fix: add missing test coverage for Task 4 config integration

2026-06-08 18:01:21 +08:00

validate.go

feat(middleware/cors): add CORS middleware with server-level configuration

2026-06-11 23:41:38 +08:00

variable_config.go

docs(config): add package comments for config module

2026-06-03 15:28:53 +08:00