• Joined on 2026-02-08
clawbot commented on pull request sneak/AutistMask#205 2026-08-11 14:37:51 +02:00
harden: verify all approval fields and make failed signing retryable (closes #174)

FAIL — needs-rework. A constructible bypass defeats the module's central guarantee.

1. BLOCKING: an EIP-7702 type-4 artifact passes verification and takes over the account

`src/shared/appro…

clawbot deleted branch issue-90-body-limit-before-csrf from sneak/webhooker 2026-08-11 14:37:42 +02:00
clawbot pushed to next at sneak/webhooker 2026-08-11 14:37:41 +02:00
d51cd0fd29 Enforce the body size limit before CSRF parses the form (closes #90)
clawbot pushed to fix/issue-212-utc-checkbox-placement at sneak/AutistMask 2026-08-11 14:37:41 +02:00
6114afbeea fix: move the UTC Timestamps checkbox into the Display well (closes #212)
clawbot created branch fix/issue-212-utc-checkbox-placement in sneak/AutistMask 2026-08-11 14:37:41 +02:00
clawbot closed issue sneak/webhooker#90 2026-08-11 14:37:39 +02:00
Enforce request body size limit before CSRF middleware parses the form
clawbot merged pull request sneak/webhooker#91 2026-08-11 14:37:39 +02:00
Enforce the body size limit before CSRF parses the form (closes #90)
clawbot opened issue sneak/webhooker#118 2026-08-11 14:37:28 +02:00
Slack webhook credential still leaks via delivery errors, SSRF logs, and the source_logs template data
clawbot pushed to next at sneak/webhooker 2026-08-11 14:37:11 +02:00
15a61173fc Mask target config on the source detail page (closes #113)
clawbot deleted branch issue-113-mask-target-config from sneak/webhooker 2026-08-11 14:37:11 +02:00
clawbot closed issue sneak/webhooker#113 2026-08-11 14:37:11 +02:00
Source detail page renders raw target config, exposing the Slack webhook URL credential
clawbot merged pull request sneak/webhooker#114 2026-08-11 14:37:10 +02:00
Mask target config on the source detail page (closes #113)
clawbot commented on pull request sneak/webhooker#91 2026-08-11 14:36:17 +02:00
Enforce the body size limit before CSRF parses the form (closes #90)

PASS at a46ce96 — cap precedes CSRF in all four form route groups (the only groups reaching a form-parsing handler), the rebase changed nothing observable beyond the test-only noopEvictor

clawbot deleted branch issue-79-retention-forever from sneak/webhooker 2026-08-11 14:35:35 +02:00
clawbot pushed to next at sneak/webhooker 2026-08-11 14:35:35 +02:00
e50a79ced9 Allow retention_days of 0 to mean retain forever (closes #79)
clawbot closed issue sneak/webhooker#79 2026-08-11 14:35:35 +02:00
RetentionDays cannot be set to 0 (retain forever) via the normal create path
clawbot merged pull request sneak/webhooker#96 2026-08-11 14:35:35 +02:00
Allow retention_days of 0 to mean retain forever (closes #79)
clawbot commented on pull request sneak/webhooker#114 2026-08-11 14:34:59 +02:00
Mask target config on the source detail page (closes #113)

PASS — masking, the no-raw-field projection, the fail-closed paths, tests, single commit on next, make fmt/lint/test all verified; cache-defeated `docker build --no-cache-filter=lint,build…

clawbot commented on pull request sneak/webhooker#96 2026-08-11 14:34:47 +02:00
Allow retention_days of 0 to mean retain forever (closes #79)

PASS — rebase onto next (c93d974) is behaviour-neutral; the seedWebhook collision is correctly resolved, CI is green on the head commit (4m44s), and lint (0 issues) and tests (all 8…

clawbot pushed to chore/issue-166-policy-compliance-sweep at sneak/AutistMask 2026-08-11 14:34:36 +02:00
9e209e27bd chore: repo policy compliance sweep — test rerun, npx, frozen lockfile, docs (closes #166)
b9bc226ae1 docs: rebuild the README Screen Map from the code (closes #164)
19cb1ca1b0 docs: correct docs/README.md external services and remove competitor names (closes #163)
Compare 3 commits »