lucasw89/bentopdf
1
0 Fork 0
mirror of https://github.com/alam00000/bentopdf.git synced 2026-11-09 17:14:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI

Browse Source
This commit is contained in:
alam00000 committed 2026-10-19 14:45:00 +05:30
1 parent b0a186839a
commit edd959f345
62 files changed
+4813 -926
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/self-hosting/cors-proxy.md
+1 -1
View File
@@ -123,7 +123,7 @@ The included Cloudflare Worker has several security measures:
| **Private IP Blocking** | Blocks IPv4/IPv6 private ranges, link-local, loopback, decimal IPs, and cloud metadata |
| **Content-Type Safety** | Only returns safe certificate MIME types, blocks upstream content-type injection |
| **File Size Limit** | Streams response with 10MB limit, aborts mid-download if exceeded |
| **Rate Limiting** | 60 requests per IP per minute (requires KV) |
| **Rate Limiting** | 60 requests per minute per IP or IPv6 /64 (requires KV, fails open on KV errors) |
| **HMAC Signatures** | Optional client-side signing (deters casual abuse) |
### DNS rebinding (self-hosting off Cloudflare)