Skip to content

Harden SDK logging, HTTP defaults, and CI supply chain - #13

Merged
franciscbalint merged 1 commit into
mainfrom
security/hardening
Aug 19, 2026
Merged

Harden SDK logging, HTTP defaults, and CI supply chain#13
franciscbalint merged 1 commit into
mainfrom
security/hardening

Conversation

@franciscbalint

Copy link
Copy Markdown
Collaborator

Summary

  • cpr::Timeout{120000} on GET/POST
  • README Security notes

This is not a version bump or registry publish. Cut a separate release-sdk pass after merge if the hardening should ship to package registries.

Test plan

  • SDK unit tests (Docker matrix / host for iOS)
  • Confirm no live API key is logged or committed
  • Confirm custom http:// / file: base URLs are rejected (except documented loopback test exceptions)

Made with Cursor

Cap HTTP requests at 120s so a stalled ZeroBounce endpoint cannot hang the caller.
@franciscbalint
franciscbalint merged commit f724ca0 into main Aug 19, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant