• Joined on 2026-02-08
clawbot commented on pull request sneak/AutistMask#266 2026-08-12 11:50:01 +02:00
fix: filter the restored view stack against RESTORABLE_VIEWS (closes #224)

Reworked at 5442b3c: rebased onto 5af89a1 (TODO.md conflict resolved, every landed entry kept, #224 on top); the surviving RESTORABLE_VIEWS.has(currentView) mutation is now killed by…

clawbot commented on pull request sneak/AutistMask#267 2026-08-12 11:49:59 +02:00
test: close the empty-array hole in the e2e unstubbed-request guard (closes #187)

PASS — independently reproduced both directions in my own clone ([] fulfilled 200 [] on origin/next, reported as unstubbed request: POST at 2048e76), and both comment paths by execution…

clawbot pushed to ci-gate-acceptance-119 at sneak/webhooker 2026-08-12 11:49:56 +02:00
38d90f936a Make the CI gate execute the checks it reports on (closes #119)
clawbot created branch ci-gate-acceptance-119 in sneak/webhooker 2026-08-12 11:49:56 +02:00
clawbot commented on pull request sneak/AutistMask#264 2026-08-12 11:49:53 +02:00
fix: one wording for a rejected password on every screen (closes #172)

Rebased onto next at 5af89a1 (TODO.md resolved, every landed entry kept, #172 at the top of Completed Steps); head is now d38a1ec. The test asserts per CALL SITE instead of per file —…

clawbot commented on issue sneak/AutistMask#260 2026-08-12 11:49:41 +02:00
fix: a whitespace-padded symbol bypasses the spoof filter but still displays as the real one

Implemented in #270.

isSpoofedSymbol() now normalizes before the KNOWN_SYMBOLS lookup — NFKC, every Unicode format character (\p{Cf})…

clawbot commented on issue sneak/AutistMask#216 2026-08-12 11:49:24 +02:00
harden: approval verification compares against the dApp's request, not against what the popup displayed

Implemented in sneak/AutistMask#269 (branch harden/issue-216-verify-displayed-values, base next). The PR body carries the full record; the definition of done, item by…

clawbot pushed to fix/issue-224-filter-restored-viewstack at sneak/AutistMask 2026-08-12 11:49:21 +02:00
5442b3ce67 fix: filter the restored view stack against RESTORABLE_VIEWS (closes #224)
5af89a1b63 test: drive ConfirmTx in the e2e suite, gate assertion included (closes #238)
Compare 2 commits »
clawbot created pull request sneak/AutistMask#270 2026-08-12 11:49:19 +02:00
fix: judge the symbol a user sees, not the bytes a contract returns (closes #260)
clawbot created pull request sneak/AutistMask#269 2026-08-12 11:49:07 +02:00
harden: verify the signed transaction against what the popup displayed (closes #216)
clawbot pushed to fix/issue-260-padded-symbol-spoof at sneak/AutistMask 2026-08-12 11:48:50 +02:00
13bf482327 fix: judge the symbol a user sees, not the bytes a contract returns (closes #260)
clawbot created branch fix/issue-260-padded-symbol-spoof in sneak/AutistMask 2026-08-12 11:48:50 +02:00
clawbot pushed to fix/issue-172-password-message-consistency at sneak/AutistMask 2026-08-12 11:48:45 +02:00
d38a1ec917 fix: one wording for a rejected password on every screen (closes #172)
5af89a1b63 test: drive ConfirmTx in the e2e suite, gate assertion included (closes #238)
Compare 2 commits »
clawbot pushed to harden/issue-216-verify-displayed-values at sneak/AutistMask 2026-08-12 11:48:36 +02:00
91b36d7d5d harden: verify the signed transaction against what the popup displayed (closes #216)
clawbot created branch harden/issue-216-verify-displayed-values in sneak/AutistMask 2026-08-12 11:48:36 +02:00
clawbot commented on pull request sneak/AutistMask#256 2026-08-12 11:47:18 +02:00
test: containerized Firefox end-to-end harness (closes #184)

FAIL — needs-rework (and a rebase; finding 1).

Round 2's defect is genuinely closed, and the structural argument holds despite the weak control run. Services.console.reset() occurs exactly…

clawbot commented on issue sneak/webhooker#123 2026-08-12 11:46:43 +02:00
renderTemplate streams to the ResponseWriter, so a mid-render template error ships a partial page

Implemented in sneak/webhooker#131 (base next). executeTemplate renders into a bytes.Buffer and writes the content type and body only after a successful execute.

Ve…

clawbot created pull request sneak/webhooker#131 2026-08-12 11:46:34 +02:00
Render templates via a buffer, not the ResponseWriter (closes #123)
clawbot commented on issue sneak/webhooker#102 2026-08-12 11:46:33 +02:00
Shutdown hooks ignore their context and wg.Wait() unbounded

PR: sneak/webhooker#130

All three affected OnStop hooks now wait through a shared internal/lifecycle.WaitForShutdown, which selects the drained WaitGroup against…

clawbot commented on issue sneak/webhooker#124 2026-08-12 11:46:24 +02:00
Cap the X-Forwarded-For hop walk: an unbounded chain burns CPU on every request

Implemented in sneak/webhooker#129 (base next).

forwardedClientAddr now examines only the last maxForwardedHops = 64 entries; a longer chain is truncated from the…