cms.c2sgmbh/docs/anleitungen
Martin Porwoll 0cdc25c4f0 feat: comprehensive security test suite
Add 143 security tests covering all security modules:

Unit Tests (125 tests):
- rate-limiter.unit.spec.ts: limiter creation, request tracking,
  blocking, window reset, IP extraction, header generation
- csrf.unit.spec.ts: token generation/validation, origin checking,
  double submit cookie pattern, referer validation
- ip-allowlist.unit.spec.ts: CIDR matching, wildcards, endpoint-
  specific allowlist/blocklist rules, IP extraction
- data-masking.unit.spec.ts: field detection, pattern matching,
  recursive masking, JWT/connection string/private key handling

API Integration Tests (18 tests):
- security-api.int.spec.ts: rate limiting responses, IP blocking,
  CSRF protection on state-changing endpoints

Test Infrastructure:
- tests/helpers/security-test-utils.ts: CSRF token generators,
  mock request builders, environment setup utilities
- vitest.config.mts: updated to include unit tests
- package.json: added test:unit and test:security scripts
- .github/workflows/security.yml: added security-tests CI job

Also updated detect-secrets.sh to ignore .spec.ts and .test.ts
files which may contain example secrets for testing purposes.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-08 00:20:47 +00:00
..
ANALYTICS_IMPLEMENTATION_GUIDE.md feat: add super admin role and update documentation 2025-12-05 14:26:08 +00:00
API_ANLEITUNG.md feat: add super admin role and update documentation 2025-12-05 14:26:08 +00:00
BILDOPTIMIERUNG.md test: add E2E and integration tests with documentation 2025-12-01 08:19:52 +00:00
SEO_ERWEITERUNG.md test: add E2E and integration tests with documentation 2025-12-01 08:19:52 +00:00
Techstack_Dokumentation_12_2025.md docs: add Git & GitHub section and update deployment workflow 2025-12-05 21:13:25 +00:00
TODO.md feat: comprehensive security test suite 2025-12-08 00:20:47 +00:00
UNIVERSAL_FEATURES.md test: add E2E and integration tests with documentation 2025-12-01 08:19:52 +00:00