lerko 93c5b638cf fix(server): constant-time secret comparison, request size limits ...

Replace string equality checks on cluster secret with
crypto/subtle.ConstantTimeCompare to prevent timing attacks.
Add http.MaxBytesReader (1MB) to all POST endpoints that decode
JSON bodies. Change Start() to return *http.Server for graceful
shutdown support. Replace log.Fatalf with log.Printf in HTTP
server goroutine.

2026-05-23 13:20:28 -04:00

..

server.go

fix(server): constant-time secret comparison, request size limits

2026-05-23 13:20:28 -04:00