Skip to content

Security: request limits for Stripe endpoints - #36

Merged
itskai-dev merged 2 commits into
mainfrom
link/limits-stripe-endpoints
Feb 7, 2026
Merged

Security: request limits for Stripe endpoints#36
itskai-dev merged 2 commits into
mainfrom
link/limits-stripe-endpoints

Conversation

@itskai-dev

Copy link
Copy Markdown
Collaborator

Harden Stripe write endpoints with per-IP rate limiting + request body size caps.

  • Added requestLimits (rate limit + max body bytes) to:
    • /api/stripe/checkout-session
    • /api/stripe/portal-session
    • /api/webhooks/stripe (legacy)
  • Added minimal unit test for checkout-session rate limiting
  • Removed hardened endpoints from scripts/audit-write-endpoints.baseline.txt

@vercel

vercel Bot commented Feb 7, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
agent-hub Ready Ready Preview, Comment Feb 7, 2026 2:44am

Request Review

@supabase

supabase Bot commented Feb 7, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project oldbapagtyvkplbqllwa because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@itskai-dev
itskai-dev merged commit 3842ca6 into main Feb 7, 2026
4 checks passed
@itskai-dev
itskai-dev deleted the link/limits-stripe-endpoints branch February 7, 2026 02:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant