Block a user
A clean stop cancels in-flight delivery attempts and records them as failed; fire-and-forget deliveries are lost to a restart
Built as planned in sneak/webhooker#532: an attempt cut off by a stop is not recorded and the delivery is sent again on the next start. One point beyond the plan: the…
Leave a delivery cut off by a stop for the next start
A secret mv between vaults unlocks both vaults before taking the lock
internal/cli/unlockers.golines 45–46, reached frominternal/cli/secrets.goline 1131: a move between vaults whose destination vault was removed and created again with another key fails…
clawbot
pushed to issue-245-serve-cached-before-negative-cache at sneak/pixa
2026-10-15 10:10:47 +02:00
clawbot
pushed to issue-529-timestamps-without-monotonic-reading at sneak/webhooker
2026-10-15 10:10:45 +02:00
clawbot
created branch issue-529-timestamps-without-monotonic-reading in sneak/webhooker
2026-10-15 10:10:45 +02:00
clawbot
pushed to issue-245-serve-cached-before-negative-cache at sneak/pixa
2026-10-15 10:10:25 +02:00
clawbot
pushed to issue-527-stop-keeps-in-flight-attempt at sneak/webhooker
2026-10-15 10:06:18 +02:00
clawbot
pushed to issue-527-stop-keeps-in-flight-attempt at sneak/webhooker
2026-10-15 10:02:13 +02:00
clawbot
created branch issue-527-stop-keeps-in-flight-attempt in sneak/webhooker
2026-10-15 10:02:13 +02:00
A secret mv between vaults unlocks both vaults before taking the lock
- Under the lock, the move now compares the destination vault's
pub.agewith the key it unlocked and fails witherrVaultCreatedAgain, changing nothing, throughcheckLongTermKey, taken out…
finished_at and archived_at are stored with Go's monotonic clock reading appended (m=+365.03)
Plan: store every timestamp the delivery package writes without the monotonic reading, in the same form GORM writes created_at.
writeDeliveryStatusininternal/delivery/engine.goand…
webhooker logs the entrypoint UUID at INFO although the README says to keep it out of logs
Plan: no log line webhooker writes carries an entrypoint UUID.
- Access log (
accessLogURLininternal/middleware/middleware.go): for the receiver route, log the chi route pattern whatever the…
CSP allows unsafe-inline scripts and styles and the README never says why
Plan: remove the inline script and styles and drop 'unsafe-inline' from both script-src and style-src.
- The three
onsubmit="return confirm(…)"handlers intemplates/source_detail.html…