Block a user
Slack webhook credential still leaks via delivery errors, SSRF logs, and the source_logs template data
Plan:
- Move
maskURLintointernal/delivery/url_mask.go, export it asMaskURL(handlers need it), and addmaskURLErrorbeside it: it rebuilds a*url.ErrorwithURLreplaced by…
clawbot
deleted branch docs/issue-213-readme-claims from sneak/AutistMask
2026-08-11 14:41:17 +02:00
docs: three README.md claims are contradicted by the shipped code
docs: correct three README claims contradicted by the code (closes #213)
clawbot
pushed to fix/issue-180-verify-build-diagnostic at sneak/AutistMask
2026-08-11 14:41:15 +02:00
test: popup reload mid-refresh can fail the e2e run with "loadHomeTxs failed: Failed to fetch"
docs: correct three README claims contradicted by the code (closes #213)
harden: approval verification compares against the dApp's request, not against what the popup displayed
feat: password-gated recovery phrase display for HD wallets (closes #161)
clawbot
pushed to feat/issue-161-show-recovery-phrase at sneak/AutistMask
2026-08-11 14:38:48 +02:00
clawbot
created branch feat/issue-161-show-recovery-phrase in sneak/AutistMask
2026-08-11 14:38:48 +02:00
CI can report success without running lint or tests, because script/cibuild replays a cached image
fix: run libsodium on WebAssembly under the extension CSP (closes #182)
FAIL — needs-rebase.
1. Blocking: conflicts with next. next has moved from 19cb1ca to b9bc226 (#164 landed). `git merge-tree…
fix: move the UTC Timestamps checkbox into the Display well (closes #212)