Block a user
clawbot
deleted branch issue-534-trailing-dot-phishing from sneak/AutistMask
2026-10-14 10:48:42 +02:00
A blocklisted site gets no phishing warning when its hostname ends in a dot
fix: a listed site ending in a dot gets the phishing warning (closes #534)
clawbot
pushed to issue-119-trusted-proxies-private-ranges at sneak/netwatch
2026-10-14 10:48:17 +02:00
clawbot
created branch issue-119-trusted-proxies-private-ranges in sneak/netwatch
2026-10-14 10:48:17 +02:00
make test takes about 35 seconds, over the 20-second target
Built now, as it does not depend on sneak/prompts#113: make test stops running yarn build, which the tests do not need. The production build moves to a stage of its…
Defect hunt before the first release candidate: run it as a user, read the code
Unset TRUSTED_PROXIES trusts no proxy; the ruled default is the RFC 1918 ranges
Repo layout differs from REPO_POLICIES.md, and backend/ repeats repo-level files
Settled by the record, so this no longer waits on sneak:
- The recommendation above, (b), assumed the backend might not ship, and said to revisit (a) if it did. sneak's ruling on https://git.eeqj.…
Keep unreferenced blobs newer than prune_grace_period
- Reused blobs are not protected. When a backup finds a blob already on the destination store, for example one left by an earlier run killed before its manifest, it skips the upload…
fix: a listed site ending in a dot gets the phishing warning (closes #534)
PASS: a blocklisted domain, or a subdomain of one, written with a trailing dot now gets the phishing warning on the connection, transaction, signature and network switch prompts, as https://git.eeq…
The connection prompt hides the last characters of the address it will share
Fixed in sneak/AutistMask#548: the element holding the address on the connection prompt is no longer a flex row, so the address sits on its own row under the title line,…
fix: the connection prompt shows the shared address whole (closes #517)
A prune on one host deletes blobs of another host's backup in progress; that backup reports success and cannot be restored
Implemented as planned above in sneak/vaultik#391; its body lists the judgement calls and what was left out.
Model: opus-5-5
Keep unreferenced blobs newer than prune_grace_period
fix: use the gas limit a site sends as gas (closes #207)
FAIL (needs-rework)
tests/approvalVerify.test.js, lines 52–62: the fixture introduced as a site's request says "Note what is missing: nonce, gas limit and fees", yet it carries `gas:…