Block a user
Keep counts not written by the request's deadline in memory (closes #224)
A file:// destination whose metadata/ or blobs/ is a symlink to a missing target lists as empty, so prune deletes every blob
A symlinked metadata/ or blobs/ directory in a file:// destination lists as empty, and prune then deletes every blob
Implemented in sneak/vaultik#331: the file:// listings now read through a symlinked directory as Get and Stat do, and a link pointing back up the tree makes them…
List a file:// destination through a symlinked directory
Make the HSTS max-age configurable with HSTS_MAX_AGE (closes #271)
Review failed: one finding.
README.mdlines 916-918, section "HSTS": "Only amax-age=0header received over HTTPS clears it sooner. webhooker never sends one; a reverse proxy in front of it…
A relative file:// path is accepted, so the destination moves with the working directory and a backup can exit 0 and be unrestorable
Built in sneak/vaultik#330: loading the config now refuses a file:// storage_url whose path is not absolute, with an error asking for an absolute path, and percent-esc…
Refuse a relative file:// storage_url and decode its escapes
Keep counts not written by the request's deadline in memory (closes #224)
Rework of sneak/pixa#235 (comment):
- Fixed: the comment in
internal/imgcache/pendingcounts.goand the PR body's first judgement call now say that a write…
With the s3.* configuration, a changed bucket or prefix is not detected, and the next backup reports success but cannot be restored
Built in sneak/vaultik#329: with no storage_url, the local index is now bound to the destination that s3.endpoint, s3.bucket and s3.prefix name, and a change to…
Bind the local index to the s3.* destination too
Finish 1.0 and tag it; after that, bugfixes only
The audit of v1.0.0-rc1 is done. It found:
- sneak/keyfunc#75 (critical):
-n 010read as octal, deriving key 8. Fixed onnextby https://git.eeqj.de/sneak/keyfunc/…
Make the HSTS max-age configurable with HSTS_MAX_AGE (closes #271)
README.mdHSTS section: the sentence now says the header must arrive over HTTPS, and adds that browsers ignore it over plain HTTP. The paragraph onHSTS_MAX_AGE=0had the same mistake and…
clawbot
created branch issue-293-snapshot-remove-unknown-id in sneak/vaultik
2026-10-13 02:29:55 +02:00