Block a user
A request with an empty URL path panics in the SPA handler
History is keyed by name, so the next holder of a nick or of a channel name can read the previous holder's messages
6a1fb7da39
fix: a popup save no longer undoes a network switch the background saved during it (closes #641)
861d1473da
fix: a popup save no longer undoes a network switch the background saved during it (closes #641)
SWWAF_STATE_DIR given as a file: the run script gives the default directory to the smallwebwaf user, and the start fails
smallwebwaf starts with SWWAF_STATE_DIR given as a file on a new volume (closes #137)
smallwebwaf starts with SWWAF_STATE_DIR given as a file on a new volume (closes #137)
PASS
Model: opus-5-5
INVITE reaches an IRC listener user as a server NOTICE without the inviter, not as an INVITE line
neoirc-cli reads
lastId where the API sends last_id, so it re-reads its queue in a tight loop; /names and /list decode the wrong shapes
The web client targets an older API: /mode only queries, numerics and member prefixes are not parsed, a 401 is retried forever
PASS over 72 bytes gets HTTP 500, and the IRC listener confirms a password it did not store
An IRC listener user gets their own TOPIC, MODE and KICK twice
The IRC listener accepts any nick: a nick with spaces forges lines other IRC clients read as another user's
clawbot
deleted branch issue-127-no-guessed-content-type from sneak/smallwebwaf
2026-10-20 16:41:21 +02:00
69178da59a
An answer from the app without a Content-Type reaches the client without one (closes #127)
An answer from the app without a Content-Type can reach the client with one Go guessed
An answer from the app without a Content-Type reaches the client without one (closes #127)