windows-iso-downloader/backend
Shekhar Vaidya 1e00dcee2e fix(backend): validate telemetry fields; add method guard to /cli/version
- Add platform allowlist validation (windows, darwin, linux) and length caps for version (≤20) and product_id (≤10) in handleTelemetry to prevent unbounded Redis hash growth from attacker-controlled field values.
- Add HTTP method guard to handleCLIVersion to reject non-GET requests with 405 Method Not Allowed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-21 21:14:21 +05:30
..
Dockerfile fix: bump Dockerfile to golang:1.25-alpine to match go.mod requirement 2026-05-18 22:51:25 +05:30
go.mod feat: Phase 3 crowdsourced cache contribution 2026-06-18 14:07:35 +05:30
go.sum feat: Phase 3 crowdsourced cache contribution 2026-06-18 14:07:35 +05:30
main.go fix(backend): validate telemetry fields; add method guard to /cli/version 2026-06-21 21:14:21 +05:30