security: fix critical/high auth, idor, races and persistence

2026-04-10 19:41:59 +03:00
parent e9a26f7975
commit a5e9bfb15c
11 changed files with 868 additions and 505 deletions
@@ -12,16 +12,16 @@ import (
 // ── AWS SQS лимиты ────────────────────────────────────────────────────────────
 const (
 	// Очередь
-	MaxQueueNameLength = 80
+	MaxQueueNameLength    = 80
 	MaxMessageSizeDefault = 262144 // 256 KB
 	MaxMessageSizeLimit   = 262144
-	MinMessageSizeLimit   = 1024   // 1 KB
+	MinMessageSizeLimit   = 1024 // 1 KB

 	// Атрибуты очереди
-	MaxDelaySeconds                  = 900   // 15 min
-	MaxVisibilityTimeout             = 43200 // 12 hours
-	MaxReceiveMessageWaitTimeSeconds = 20    // long polling cap
-	MinMessageRetentionPeriod        = 60    // 1 min
+	MaxDelaySeconds                  = 900     // 15 min
+	MaxVisibilityTimeout             = 43200   // 12 hours
+	MaxReceiveMessageWaitTimeSeconds = 20      // long polling cap
+	MinMessageRetentionPeriod        = 60      // 1 min
 	MaxMessageRetentionPeriod        = 1209600 // 14 days

 	// Receive
@@ -29,7 +29,7 @@ const (
 	MinNumberOfMessagesLimit = 1

 	// Message attributes
-	MaxMessageAttributes  = 10
+	MaxMessageAttributes    = 10
 	MaxMessageAttributeSize = 262144 // 256 KB суммарно (тело + атрибуты)

 	// Deduplication / GroupID