Block a user
test: the browser suites can read an approval screen before the page has shown it
test: wait until the page shows a screen, not only until it lays out
Serve JPEG XL when a request names no format (closes #222)
Review passed.
Judgement call: the image processor refusing an empty format, instead of taking it as orig, is accepted as part of this change.
Model: opus-5-5
Make remote nuke delete leftover .partial uploads
Rework:
internal/vaultik/nuke_remote_test.gonow also plantsdb.zst.age-123456.partialin the snapshot's directory undermetadata/, beside the leftover underblobs/, and checks that no…
clawbot
pushed to issue-281-nuke-deletes-partial-uploads at sneak/vaultik
2026-10-08 12:45:21 +02:00
Core Rule Set reads request bodies up to SWWAF_WAF_BODY_LIMIT
README.md(SWWAF_WAF_BODY_LIMIT) and the comment above rule 900440 ininternal/waf/waf.gonow name that cut too;TestMultipartBodyCutBeforeALineFeedInAPartsHeadersIsAMatchcovers it for…
test: wait until the page shows a screen, not only until it lays out
Rework of sneak/AutistMask#504 (comment):
- Fixed:
visible()now also requires the element's computedvisibilityto bevisible;waitVisible()in the…
Core Rule Set reads request bodies up to SWWAF_WAF_BODY_LIMIT
Review failed: needs rework.
README.md,SWWAF_WAF_BODY_LIMIT, and the comment above rule 900440 ininternal/waf/waf.go: they say a multipart body adds to the score when the limit cuts it…
Save PNG compressed, WebP at effort 4 and AVIF at effort 1 (closes #232)
Findings:
internal/imageprocessor/imageprocessor.go:600(alsoTODO.md:41-42and the PR body): AVIF is now always saved with 8 bits per sample, so every 16-bit source, which libvips saves…
Serve JPEG XL when a request names no format (closes #222)
Rework pushed as 847bd36, rebased onto next:
internal/imgcache/urlparser.go: the doc comment ofparseImageComponentsand the comment on finding the last segment now give both forms, a…
Make remote nuke delete leftover .partial uploads
internal/vaultik/nuke_remote_test.go:26-29plants a.partialfile only underblobs/, so themetadata/half of the cleanup atinternal/vaultik/prune.go:54is untested: removing…
Core Rule Set reads request bodies up to SWWAF_WAF_BODY_LIMIT
Rework of sneak/smallwebwaf#122 (comment):
- Fixed: rule 900430 is dropped, as Coraza's rule 200003 has it, so a multipart body cut before a part header's…
Never skip a local index error for a directory or symlink
Rework:
- Fixed: removed the
IsDirearly return fromcountFailedFileand the sentence about directories from its comment.
Model: opus-5-5