SnapOtter d61226496b fix(security): harden rate limits, Redis auth, resource caps, and error sanitization ...

- Lower LOGIN_ATTEMPT_LIMIT default from 30 to 10 (brute-force protection)
- Lower RATE_LIMIT_PER_MIN default from 1000 to 300
- Add Redis authentication (requirepass) with REDIS_PASSWORD env var
- Add Redis maxmemory 512mb cap to prevent unbounded growth
- Add mem_limit: 1g to Postgres and Redis containers
- Strip internal file paths from all error responses (defense-in-depth)
- Add startup warnings for default admin/Postgres/Redis credentials
- Update security test expectations for new defaults

2026-06-20 00:53:11 +08:00

..

benchmark

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

e2e

test: fix 2.0 integration CI -- 202 async fallback + timeout hardening

2026-06-19 18:15:20 +08:00

e2e-analytics

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

e2e-docker

test: expand test coverage across all layers (+1,157 tests)

2026-06-06 19:37:29 +08:00

e2e-docs

feat(docs): Two-Doors home, otter-orange brand, Pagefind search, and enterprise SSO/SCIM/roles guides

2026-06-19 18:46:59 +08:00

e2e-editor

fix(editor): apply layer effects + object flip, add Beta badge, repair e2e specs

2026-06-17 14:21:35 +08:00

e2e-landing

test(e2e-landing): match enterprise redesign and fix Astro dev-server config (#241)

2026-06-15 22:14:50 +08:00

fixtures

fix: resolve 18 QA-discovered bugs across tools, previews, and the AI pipeline (#242)

2026-06-15 22:26:24 +08:00

helpers

fix: resolve 18 QA-discovered bugs across tools, previews, and the AI pipeline (#242)

2026-06-15 22:26:24 +08:00

integration

test: fix 2.0 integration CI -- 202 async fallback + timeout hardening

2026-06-19 18:15:20 +08:00

qa

fix: resolve 18 QA-discovered bugs across tools, previews, and the AI pipeline (#242)

2026-06-15 22:26:24 +08:00

setup

test: honor SYNC_WAIT_MS in docker tests instead of clobbering it

2026-06-17 14:28:41 +08:00

unit

fix(security): harden rate limits, Redis auth, resource caps, and error sanitization

2026-06-20 00:53:11 +08:00

e2e-pg-create-db.cjs

style: apply Biome formatting to enterprise files

2026-06-14 14:53:44 +08:00

global-setup.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00