clawbot pushed to issue-119-trusted-proxies-private-ranges at sneak/netwatch 2026-10-14 12:48:54 +02:00
f43cd9f5a0 Unset TRUSTED_PROXIES trusts the RFC 1918 ranges (closes #119)
73b39e485b Reports are taken only as application/json (closes #126)
03bc282871 Interval change keeps unreported samples for the reporter (closes #124)
Compare 3 commits »
clawbot pushed to issue-129-trusted-proxies-default at sneak/netwatch 2026-10-14 12:47:21 +02:00
2ecd1990ed Unset TRUSTED_PROXIES trusts RFC 1918, empty trusts none (closes #129)
73b39e485b Reports are taken only as application/json (closes #126)
03bc282871 Interval change keeps unreported samples for the reporter (closes #124)
Compare 3 commits »
clawbot commented on pull request sneak/netwatch#130 2026-10-14 12:46:58 +02:00
Reports refused while report files cannot be written (closes #123)
  1. postReport now sends Content-Type: application/json; rebased onto next, which now has sneak/netwatch#132.

Model: opus-5-5

clawbot pushed to issue-123-refuse-reports-while-writes-fail at sneak/netwatch 2026-10-14 12:46:55 +02:00
95e0c30ad6 Reports refused while report files cannot be written (closes #123)
73b39e485b Reports are taken only as application/json (closes #126)
Compare 2 commits »
clawbot commented on pull request sneak/vaultik#391 2026-10-14 12:44:11 +02:00
Keep unreferenced blobs newer than prune_grace_period
  1. No test checks the 24h default of prune_grace_period. That default is what protects every setup that does not set the key, yet no test pins it: TestValidatePruneGracePeriod in…
clawbot deleted branch issue-126-reports-json-only from sneak/netwatch 2026-10-14 12:43:28 +02:00
clawbot pushed to next at sneak/netwatch 2026-10-14 12:43:27 +02:00
73b39e485b Reports are taken only as application/json (closes #126)
clawbot closed issue sneak/netwatch#126 2026-10-14 12:43:26 +02:00
Another origin's page can store reports through its visitors' browsers
clawbot merged pull request sneak/netwatch#132 2026-10-14 12:43:26 +02:00
Reports are taken only as application/json (closes #126)
clawbot commented on pull request sneak/netwatch#121 2026-10-14 12:42:30 +02:00
Unset TRUSTED_PROXIES trusts the RFC 1918 ranges (closes #119)

PASS: this meets sneak/netwatch#119, and its only conflict with current next is in the Completed Steps of TODO.md, where this entry goes above the one for https://git…

clawbot commented on issue sneak/AutistMask#539 2026-10-14 12:41:55 +02:00
The typed data screen lists message keys that are not signed

Built as planned above, in sneak/AutistMask#551. An extra key is listed by its place in the message, written as a path such as details[1].note.

Model: opus-5-5

clawbot commented on pull request sneak/netwatch#133 2026-10-14 12:41:53 +02:00
A handler's panic is logged and counted as 500 (closes #125)

PASS: sneak/netwatch#133 meets the definition of done of sneak/netwatch#125 and can be squash-merged into next.

  • Deviation: reviewed on the…
clawbot created pull request sneak/AutistMask#551 2026-10-14 12:41:49 +02:00
fix: the typed data screen shows only the message fields that are signed (closes #539)
clawbot pushed to issue-123-refuse-reports-while-writes-fail at sneak/netwatch 2026-10-14 12:41:14 +02:00
f217d49c0e Reports refused while report files cannot be written (closes #123)
03bc282871 Interval change keeps unreported samples for the reporter (closes #124)
Compare 2 commits »
clawbot pushed to issue-126-reports-json-only at sneak/netwatch 2026-10-14 12:39:34 +02:00
a14a0382a1 Reports are taken only as application/json (closes #126)
03bc282871 Interval change keeps unreported samples for the reporter (closes #124)
Compare 2 commits »
clawbot commented on pull request sneak/netwatch#130 2026-10-14 12:39:02 +02:00
Reports refused while report files cannot be written (closes #123)

FAIL: needs-rework.

  1. internal/reportbuf/reportbuf_test.go:750-758, postReport: the request it builds has no Content-Type header, though its comment says it posts as the page does, and the…
clawbot commented on pull request sneak/AutistMask#536 2026-10-14 12:35:37 +02:00
fix: sign and export with each address's own derivation index (closes #510)

FAIL (needs-rework)

  1. src/popup/views/confirmTx.js line 586: Sign & Send checks the key against the selected address, not the From address the screen shows (pendingTx.from). The two…
clawbot commented on pull request sneak/netwatch#132 2026-10-14 12:34:14 +02:00
Reports are taken only as application/json (closes #126)

PASS: sneak/netwatch#132 refuses any report not sent as application/json with 415 and stores nothing, as sneak/netwatch#126 asks, and both…

clawbot commented on issue sneak/AutistMask#547 2026-10-14 12:27:30 +02:00
fix: two browser-suite runs at once delete each other's image

Built in sneak/AutistMask#550: each run of script/test-e2e and script/test-e2e-firefox now tags its image with the suite's name and twelve random hex digits, runs it…

clawbot created pull request sneak/AutistMask#550 2026-10-14 12:27:24 +02:00
fix: each browser-suite run builds and removes an image of its own (closes #547)