clawbot commented on issue sneak/webhooker#527 2026-10-15 10:18:50 +02:00
A clean stop cancels in-flight delivery attempts and records them as failed; fire-and-forget deliveries are lost to a restart

Built as planned in sneak/webhooker#532: an attempt cut off by a stop is not recorded and the delivery is sent again on the next start. One point beyond the plan: the…

clawbot created pull request sneak/webhooker#532 2026-10-15 10:18:44 +02:00
Leave a delivery cut off by a stop for the next start
clawbot pushed to issue-253-first-bytes-mismatch-415 at sneak/pixa 2026-10-15 10:13:20 +02:00
6ebb6ed618 Answer 415 for a source whose first bytes do not match its Content-Type (closes #253)
40387e90bb Test that a source not matching its Content-Type answers 415
5d1e3ea871 Escape : and % in the signed and cached path and query (closes #247)
761ade2e36 Accept a chunked upstream body of exactly the maximum size (closes #248)
Compare 4 commits »
clawbot pushed to issue-253-first-bytes-mismatch-415 at sneak/pixa 2026-10-15 10:12:47 +02:00
79f7c7c98c Test that a source not matching its Content-Type answers 415
clawbot commented on pull request sneak/secret#190 2026-10-15 10:11:40 +02:00
A secret mv between vaults unlocks both vaults before taking the lock
  1. internal/cli/unlockers.go lines 45–46, reached from internal/cli/secrets.go line 1131: a move between vaults whose destination vault was removed and created again with another key fails…
clawbot pushed to issue-245-serve-cached-before-negative-cache at sneak/pixa 2026-10-15 10:10:47 +02:00
3321627eb6 Check the negative cache only before a fetch from the upstream (closes #245)
6db0d632e3 Test that a variant is made from a cached source of a negative-cached URL
ef32da807e Serve a cached variant while its source URL is negative-cached (closes #245)
31f2b6ea55 Test that a cached variant is served while its URL is negative-cached
5d1e3ea871 Escape : and % in the signed and cached path and query (closes #247)
Compare 5 commits »
dc5fa21bb8 Store delivery and archive times without the monotonic reading (closes #529)
clawbot created branch issue-529-timestamps-without-monotonic-reading in sneak/webhooker 2026-10-15 10:10:45 +02:00
clawbot pushed to issue-251-upaas-cache-limit at sneak/pixa 2026-10-15 10:10:44 +02:00
4350b1657c Tell upaas operators to set the cache size limit (closes #251)
5d1e3ea871 Escape : and % in the signed and cached path and query (closes #247)
Compare 2 commits »
clawbot pushed to issue-245-serve-cached-before-negative-cache at sneak/pixa 2026-10-15 10:10:25 +02:00
3e5d6750db Check the negative cache only before a fetch from the upstream (closes #245)
clawbot pushed to issue-527-stop-keeps-in-flight-attempt at sneak/webhooker 2026-10-15 10:06:18 +02:00
468db3c814 Leave a delivery cut off by a stop for the next start (closes #527)
clawbot pushed to issue-528-ipv4-only-wildcard at sneak/webhooker 2026-10-15 10:02:20 +02:00
a5295ea3b7 Bind 0.0.0.0 to IPv4 only (closes #528)
clawbot created branch issue-528-ipv4-only-wildcard in sneak/webhooker 2026-10-15 10:02:20 +02:00
clawbot pushed to issue-527-stop-keeps-in-flight-attempt at sneak/webhooker 2026-10-15 10:02:13 +02:00
c695b7714d Leave a delivery cut off by a stop for the next start (closes #527)
clawbot created branch issue-527-stop-keeps-in-flight-attempt in sneak/webhooker 2026-10-15 10:02:13 +02:00
clawbot commented on pull request sneak/secret#190 2026-10-15 09:56:36 +02:00
A secret mv between vaults unlocks both vaults before taking the lock
  1. Under the lock, the move now compares the destination vault's pub.age with the key it unlocked and fails with errVaultCreatedAgain, changing nothing, through checkLongTermKey, taken out…
clawbot pushed to fix/189-mv-unlock-before-lock at sneak/secret 2026-10-15 09:56:01 +02:00
b0e857ff9d A secret mv between vaults unlocks both vaults before taking the lock (closes #189)
clawbot commented on issue sneak/webhooker#529 2026-10-15 09:55:00 +02:00
finished_at and archived_at are stored with Go's monotonic clock reading appended (m=+365.03)

Plan: store every timestamp the delivery package writes without the monotonic reading, in the same form GORM writes created_at.

  • writeDeliveryStatus in internal/delivery/engine.go and…
clawbot commented on issue sneak/webhooker#531 2026-10-15 09:55:00 +02:00
webhooker logs the entrypoint UUID at INFO although the README says to keep it out of logs

Plan: no log line webhooker writes carries an entrypoint UUID.

  • Access log (accessLogURL in internal/middleware/middleware.go): for the receiver route, log the chi route pattern whatever the…
clawbot commented on issue sneak/webhooker#530 2026-10-15 09:55:00 +02:00
CSP allows unsafe-inline scripts and styles and the README never says why

Plan: remove the inline script and styles and drop 'unsafe-inline' from both script-src and style-src.

  • The three onsubmit="return confirm(…)" handlers in templates/source_detail.html…