cv-site

Files

T

juanatsap 58c1237326 feat: Add secure contact form with comprehensive security features

- Add contact form dialog with HTMX integration (hx-post)
- Implement browser-only access middleware (blocks curl/Postman/wget)
- Add rate limiting (5 requests/hour per IP) for contact endpoint
- Implement honeypot and timing-based bot detection
- Add input validation (email format, message length 10-5000 chars)
- Create contact button in desktop and mobile navigation (last position)

Security features:
- Browser-only middleware validates User-Agent, Referer/Origin, HX-Request headers
- Honeypot field returns fake success to fool bots while logging spam
- Timing validation rejects forms submitted < 2 seconds
- All security events logged for monitoring

Documentation:
- docs/SECURITY.md - Comprehensive security documentation
- docs/HACK-CHALLENGE.md - "Try to Hack Me!" challenge for security researchers
- docs/SECURITY-AUDIT-REPORT.md - Full security audit report
- docs/CONTACT-FORM-QUICKSTART.md - Integration guide

Form fields: email (required), name, company, subject, message (required)

2025-11-30 14:31:58 +00:00

benchmarks_test.go

feat: Complete all remaining Future Improvements (#4-8)

2025-11-20 18:05:45 +00:00

constants.go

fix: Mobile hamburger menu and iPad sidebar visibility

2025-11-30 09:29:35 +00:00

contact.go

feat: Add plain text CV endpoint and contact form with security

2025-11-30 13:47:49 +00:00

cv_contact.go

feat: Add plain text CV endpoint and contact form with security