Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Istvan Matejcsok 21e6f4c2d5 harden the reference backend: write bounds + CORS ... The @pcbjam/backend-example server had a 1 GiB body limit, no per-owner/per-lib quotas, bound to 0.0.0.0, and reflected any origin with credentials when CORS_ORIGIN is *. Bound the write surface (5 MiB body cap, per-owner lib and per-lib item quotas), bind 127.0.0.1 by default (opt in via HOST), and force credentials off for a wildcard CORS origin. Refactor main() into an exported buildApp() and add web/backend/test/security.test.ts (inject-based). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-16 12:46:17 +02:00
..
security.test.ts	harden the reference backend: write bounds + CORS	2026-07-16 12:46:17 +02:00