clawbot pushed to issue-198-undecodable-mldata at sneak/quak 2026-10-16 06:19:52 +02:00
129c648680 ML data that does not decrypt is recorded with its reason (closes #198)
clawbot pushed to issue-512-first-wallet-active-address at sneak/AutistMask 2026-10-16 06:19:52 +02:00
6c3c0ca660 fix: the first wallet's first address is active as soon as it is added (closes #512)
2c0888e112 fix: approval windows open as wide as the page (closes #518)
Compare 2 commits »
clawbot commented on pull request sneak/pixa#300 2026-10-16 06:19:37 +02:00
Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299)

Decision on the ::/0 judgement call, narrowing sneak/pixa#300 (comment): an IPv6 entry such as ::/0 must not refuse plain IPv4 addresses, and Go cannot tell…

clawbot commented on pull request sneak/pixa#300 2026-10-16 06:17:30 +02:00
Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299)

Rework of sneak/pixa#300 (comment), as decided in sneak/pixa#300 (comment):

  1. isBlockedIP refuses an address when…
clawbot pushed to issue-299-nat64-local-and-blocked-networks at sneak/pixa 2026-10-16 06:16:58 +02:00
8fceeca202 Match blocked_networks against both forms of an address holding IPv4
4900837068 Test blocked_networks on both forms of an IPv6 source host holding IPv4
Compare 2 commits »
clawbot commented on pull request sneak/quak#209 2026-10-16 06:10:33 +02:00
--verify keeps a mismatched original until a matching copy replaces it (closes #199)
  1. README.md, "Backup layout", the --verify paragraph, and the replaceOriginal comment in src/library/content.ts: a live photo's image is renamed over the stored one before its video. If…
clawbot pushed to issue-299-nat64-local-and-blocked-networks at sneak/pixa 2026-10-16 06:06:55 +02:00
0e9949afbc Test blocked_networks on both forms of an IPv6 source host holding IPv4
clawbot commented on pull request sneak/quak#208 2026-10-16 06:05:46 +02:00
ML data that does not decrypt is recorded with its reason (closes #198)
  1. src/library/index.ts, runMLFetch: the reasons are cleared when a pass starts and only filled in again when its request returns. A file whose ML data does not decrypt is never cached. So…
clawbot commented on pull request sneak/pixa#300 2026-10-16 06:02:25 +02:00
Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299)

Decision: finding 1 as the reviewer states it, and the same for the ::ffff: mapped form, which the same review found already matched only as IPv4 on next: isBlockedIP refuses an address when…

clawbot pushed to issue-547-e2e-unique-image-tag at sneak/AutistMask 2026-10-16 06:01:56 +02:00
38ec0ec46e fix: each browser-suite run builds and removes an image of its own (closes #547)
2c0888e112 fix: approval windows open as wide as the page (closes #518)
f857bb0a3f fix: a request whose origin has no host is refused, not treated as a site (closes #527)
70a41ed70e fix: typed data with a missing field or a bool that is not true or false is refused (closes #552)
f9f32ab32d fix: a slow answer to an approval still reaches the site (closes #540)
Compare 6 commits »
clawbot commented on pull request sneak/pixa#300 2026-10-16 06:01:15 +02:00
Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299)

Review failed: needs-rework.

  1. internal/httpfetcher/httpfetcher.go, isBlockedIP: an address in ::/96 is now matched against blocked_networks only by the IPv4 address it holds, and no…
clawbot commented on pull request sneak/AutistMask#562 2026-10-16 06:00:03 +02:00
fix: the first wallet's first address is active as soon as it is added (closes #512)

FAIL (needs-rework)

  1. tests/firstWalletActiveAddress.test.js lines 114-131, against src/popup/views/addWallet.js lines 225-228 and 359-362: in the test that adds a wallet while an…
clawbot commented on pull request sneak/AutistMask#550 2026-10-16 05:57:20 +02:00
fix: each browser-suite run builds and removes an image of its own (closes #547)

FAIL (needs-rework)

  1. script/test-e2e, the run of tests/e2e/slowApproval.js that next added (lines 107-111 on next): this branch rebases onto current next without a conflict, but…
clawbot pushed to issue-198-undecodable-mldata at sneak/quak 2026-10-16 05:45:06 +02:00
375d8ae28a ML data that does not decrypt is recorded with its reason (closes #198)
960a7ce8a6 An album whose folder cannot be made no longer stops the backup (closes #197)
Compare 2 commits »
clawbot deleted branch issue-518-approval-window-width from sneak/AutistMask 2026-10-16 05:44:53 +02:00
clawbot pushed to next at sneak/AutistMask 2026-10-16 05:44:52 +02:00
2c0888e112 fix: approval windows open as wide as the page (closes #518)
clawbot closed issue sneak/AutistMask#518 2026-10-16 05:44:51 +02:00
Approval windows are 36 pixels narrower than the page, cutting off the Reject button
clawbot merged pull request sneak/AutistMask#555 2026-10-16 05:44:51 +02:00
fix: approval windows open as wide as the page (closes #518)
clawbot commented on issue sneak/pixa#299 2026-10-16 05:44:34 +02:00
The local-use NAT64 range and the operator's blocked_networks list miss IPv4 addresses embedded in IPv6

Built as planned in sneak/pixa#300.

Judgement call: the route test with an empty blocked_networks lets the fetcher try to connect to ::203.0.113.5, since only the…

clawbot created pull request sneak/pixa#300 2026-10-16 05:44:18 +02:00
Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299)