Martin Porwoll fc94531931 feat: implement security hardening module ... Security Features: - Central rate-limiter service with Redis support and memory fallback - Predefined limiters: publicApi, auth, email, search, form, strict - Automatic cleanup of stale entries - IP allowlist/blocklist for sensitive endpoints - CIDR and wildcard support - Configurable via SEND_EMAIL_ALLOWED_IPS, BLOCKED_IPS env vars - CSRF protection with Double Submit Cookie pattern - Token endpoint: GET /api/csrf-token - Origin header validation - Data masking service for sensitive data - Automatic redaction of passwords, tokens, API keys - Safe logger factory for consistent logging - Recursive object masking for audit logs Secret Scanning: - Pre-commit hook for local secret detection - GitHub Actions workflow with Gitleaks and CodeQL - Gitleaks configuration file - Dependency vulnerability scanning Updated: - /api/send-email now uses central rate-limiter and IP allowlist - Redis lib exports getRedisClient and isRedisAvailable 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>		2025-12-07 23:04:14 +00:00
..
ANALYTICS_IMPLEMENTATION_GUIDE.md	feat: add super admin role and update documentation	2025-12-05 14:26:08 +00:00
API_ANLEITUNG.md	feat: add super admin role and update documentation	2025-12-05 14:26:08 +00:00
BILDOPTIMIERUNG.md	test: add E2E and integration tests with documentation	2025-12-01 08:19:52 +00:00
SEO_ERWEITERUNG.md	test: add E2E and integration tests with documentation	2025-12-01 08:19:52 +00:00
Techstack_Dokumentation_12_2025.md	docs: add Git & GitHub section and update deployment workflow	2025-12-05 21:13:25 +00:00
TODO.md	feat: implement security hardening module	2025-12-07 23:04:14 +00:00
UNIVERSAL_FEATURES.md	test: add E2E and integration tests with documentation	2025-12-01 08:19:52 +00:00