feat: enforce https and replay protection for sensitive requests#319

Open

hardy-dev-infinilabs wants to merge 1 commit into

mainfrom

pr-security-https-sensitive-ops

hardy-dev-infinilabs commented May 6, 2026

Summary

add core helpers for HTTPS detection and one-time replay nonces
protect sensitive account and user endpoints with secure transport and replay checks
teach the frontend request layer to block insecure sensitive requests and attach replay nonces

Testing

go test ./core ./modules/security/api
NODE_OPTIONS='--openssl-legacy-provider --max_old_space_size=4096' ./node_modules/.bin/umi build


          feat: enforce https and replay protection for sensitive requests

7fec139

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet