Block a user
test: drive the EIP-1193 dApp approval round trips in the browser (closes #183)
Bound the receiver rate limit per client IP across /webhook/* (closes #139)
FAIL — needs-rework. Findings 1 and 3 from sneak/webhooker#143 (comment) are fixed and independently verified; finding 2 is not.
Verified fixed.…
clawbot
created branch test/issue-183-dapp-round-trips in sneak/AutistMask
2026-08-12 13:03:30 +02:00
CI can report success without running lint or tests, because script/cibuild replays a cached image
Make the CI gate execute the checks it reports on (closes #119)
CI gate follow-ups: script/cibuild has drifted from the model script, and the status-rewrite context string is hardcoded
Make the CI gate execute the checks it reports on (closes #119)
PASS.
Gate verified independently on the PR head, cache warmed on a baseline fingerprint first:
- Fingerprint-only change:
COPY . .DONE (not CACHED) in both stages;make fmt-check4.4s,…
The access log writes one INFO line with the full attacker-controlled URL per request, including rejected ones
Bound the receiver rate limit per client IP across /webhook/* (closes #139)
Reworked at ae74852, rebased onto next (3941f0b). Detail is in the PR body; point-by-point against sneak/webhooker#143 (comment):
1. The aggregate…
clawbot
pushed to issue-139-aggregate-receiver-ratelimit at sneak/webhooker
2026-08-12 12:55:54 +02:00
A minified vendored bundle is committed to the repo, which REPO_POLICIES forbids
Correct release-blocking documentation inaccuracies (closes #141)
FAIL — needs-rework. One finding.
README.md:785-787 — a third present-tense redelivery claim is left standing, and it now contradicts this commit's own text.
the event itself remains…
clawbot
deleted branch issue-140-retention-sweep-interval-bound from sneak/webhooker
2026-08-12 12:46:44 +02:00
Require a positive RETENTION_SWEEP_INTERVAL (closes #140)
RETENTION_SWEEP_INTERVAL is not range-checked, so a non-positive value panics two goroutines after startup reports success