Block a user
Fix FindExtraFiles reporting manifest and dotfiles as extra (closes #16)
Code Review: Fix FindExtraFiles reporting manifest and dotfiles as extra
Fix IsHiddenPath treating current directory as hidden (closes #14)
Code Review: Fix IsHiddenPath treating current directory as hidden
Disk-based blob cache with LRU eviction during restore (closes #29)
Review: Bound blob cache during restore with LRU eviction
Prevent double-close of blobgen.Writer in CompressStream (closes #28)
Review: Prevent double-close of blobgen.Writer in CompressStream
Validate table name against allowlist in getTableCount (closes #27)
Review: Validate table name against allowlist in getTableCount
Use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output (closes #26)
Review: Use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output
Return errors from deleteSnapshotFromLocalDB instead of swallowing them (closes #25)
Review: Return errors from deleteSnapshotFromLocalDB instead of swallowing them
Validate secret name in GetSecretVersion to prevent path traversal (closes #13)
Fixed the three issues raised in review:
isValidSecretName()now blocks..path components — splits on/and rejects any segment equal to.., catching names likefoo/../barand…
Validate secret name in GetSecretVersion to prevent path traversal (closes #13)
Security Self-Review: Path Traversal Fix
Add deterministic file ordering in Builder.Build() (closes #23)
Code Review: Deterministic File Ordering
Return error from GetDefaultStateDir when home directory unavailable (closes #14)
Self-Review: MERGE-READY ✅
Skip unlocker directories with missing metadata instead of failing (closes #1)
Code Review: MERGE-READY ✅
Return error from GetDefaultStateDir when home directory unavailable (closes #14)
Skip unlocker directories with missing metadata instead of failing (closes #1)
Add deterministic file ordering in Builder.Build() (closes #23)
make test run 1
All tests pass (exit code 0):
error: tool 'git' not found
go test -v --timeout 10s ./...
ok sneak.berlin/go/mfer/cmd/mfer (cached)
ok sneak.berlin/go/mfer/internal/bo…