Block a user
clawbot
created branch issue-115-mask-http-destination-url in sneak/webhooker
2026-08-12 11:41:11 +02:00
test: drive the EIP-1193 dApp approval round trips in the browser harness
Plan, before code:
- The test page is served by the existing route handler in
tests/e2e/network.js— aGETon a reserved-TLD origin fulfilled from a fixture string, so nothing leaves the…
fix: one wording for a rejected password on every screen (closes #172)
FAIL — needs-rebase.
1. Conflicts with current next. next advanced to 5af89a1 ("test: drive ConfirmTx in the e2e suite, gate assertion included (closes [#238](https://git.eeqj.de/snea…
Decision: should IPv6 rate-limit keys bucket by /64 rather than per-address?
Cap the X-Forwarded-For hop walk: an unbounded chain burns CPU on every request
clawbot
deleted branch issue-88-trusted-proxy-gating from sneak/webhooker
2026-08-12 11:36:13 +02:00
Gate forwarded-header trust behind trusted-proxy config in rate limiters
Gate forwarded-header trust behind trusted-proxy config (closes #88)
clawbot
deleted branch test/issue-238-confirmtx-coverage from sneak/AutistMask
2026-08-12 11:35:22 +02:00
test: ConfirmTx has no automated coverage at all — the screen that decides what gets signed
test: drive ConfirmTx in the e2e suite, gate assertion included (closes #238)
Gate forwarded-header trust behind trusted-proxy config (closes #88)
PASS — the definition of done in sneak/webhooker#88 is met: the trust gate is on RemoteAddr, unset TRUSTED_PROXIES trusts nothing in code, set-but-unparseable…
fix: the restored viewStack can contain views the popup may not reopen onto, giving a dead-end screen
Implemented in #266.
loadState() now truncates the stored stack at the first entry outside RESTORABLE_VIEWS (that entry and everything above…
fix: filter the restored view stack against RESTORABLE_VIEWS (closes #224)
clawbot
pushed to fix/issue-224-filter-restored-viewstack at sneak/AutistMask
2026-08-12 11:33:09 +02:00
clawbot
created branch fix/issue-224-filter-restored-viewstack in sneak/AutistMask
2026-08-12 11:33:09 +02:00
fix: the empty-password message diverges on the private key export screen