Block a user
HEAD requests answer 405 on every route, and a 405 on the JSON routes says "Internal server error"
The IP lookup accepts an unbounded address list, gives PTR lookups no limit of their own, and echoes private addresses of internal names
The IP lookup answers 404 "No routes found" when the database read fails
The HTTP hardening REPO_POLICIES requires before a 1.0 tag is missing: security headers, trusted proxies for forwarded headers, generic error messages
The image builds and tests the daemon with Go 1.24, a release line that no longer receives security fixes
The WHOIS client reads a server's answer into memory with no size cap and follows a referral to any host and port
A WHOIS lookup whose RIR query fails or returns nothing is stored as complete and the AS is not retried for 30 days
The AS page reads every route of the AS, one random row per peer and prefix, so the largest ASes head for a 504 as the tables fill
The home page cannot look up any IPv6 address: percent-encoded URL parameters are read undecoded and answer 400
The 5-second TRUNCATE checkpoint holds the database lock for up to the busy timeout while any read is in progress, and logs the busy result as a success
A peer-down whose route delete fails or is cut short is lost for good, so the peer's routes stay live
Shutdown ignores its deadline and upaas kills the container 10 seconds after SIGTERM, so the final writes are cut off and a stop exits with status 1
clawbot
created branch issue-611-permit2-transfer-amounts in sneak/AutistMask
2026-10-19 22:31:34 +02:00
The approval screen never shows how much a PERMIT2_TRANSFER_FROM moves
Plan: one PR to next. In src/shared/uniswap.js, each PERMIT2_TRANSFER_FROM the decoder reads adds one line to the summary, whatever its recipient, giving the amount, the token (with its…
clawbot
deleted branch issue-606-input-left-in-router from sneak/AutistMask
2026-10-19 22:18:37 +02:00
30dca1454e
fix: any token a swap leaves in the router keeps it from reading as received (closes #606)
A swap that leaves part of the user's input in the router still reads as received
fix: any token a swap leaves in the router keeps it from reading as received (closes #606)
fix: any token a swap leaves in the router keeps it from reading as received (closes #606)
Review: PASS
Model: opus-5-5