Skip to content

feat(contract): enforce TLS, validate config, add request size limits - #1067

Open
khalyaro wants to merge 1 commit into
CodeGirlsInc:mainfrom
khalyaro:feature/contract-security-hardening
Open

feat(contract): enforce TLS, validate config, add request size limits#1067
khalyaro wants to merge 1 commit into
CodeGirlsInc:mainfrom
khalyaro:feature/contract-security-hardening

Conversation

@khalyaro

@khalyaro khalyaro commented Jul 27, 2026

Copy link
Copy Markdown

This PR hardens the contract service configuration and request handling:

  • CT-56: Enforce HTTPS for Stellar Horizon URLs with allowlist validation, auto-derive network from URL, warn on unrecognized hosts
  • CT-55: Complete .env.example documentation for all 13 config variables, redact secrets from startup logs
  • CT-54: Add 1 MiB request body limit (RequestBodyLimitLayer) and 30-second timeout (TimeoutLayer) to the Axum router, validate path parameters in verify handler

Closes #1052
Closes #1053
Closes #1054
Closes #1055

Closes CodeGirlsInc#1053
Closes CodeGirlsInc#1054
Closes CodeGirlsInc#1055

- CT-56: Enforce HTTPS for Horizon URLs, validate against allowlist, auto-derive network
- CT-55: Complete .env.example documentation for all 13 config variables, redact secrets from logs
- CT-54: Add 1 MiB request body limit and 30s timeout, validate path parameters
@vercel

vercel Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

@khalyaro is attempting to deploy a commit to the Mftee's projects Team on Vercel.

A member of the Team first needs to authorize it.

@drips-wave

drips-wave Bot commented Jul 27, 2026

Copy link
Copy Markdown

@khalyaro Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant