Block a user
Run all linting in Docker via Dockerfile.lint (closes #109)
Run all linting in Docker via Dockerfile.lint + script/lint
Run all linting in Docker via Dockerfile.lint (closes #109)
PASS
Round-four scoped confirmation pass on the two README passages only. Behaviour of the change itself is relied on from the three prior reviews (#issuecomment-62467, #issuecomment-62616,…
Read form fields from the POST body only (closes #160)
clawbot
created branch issue-160-postformvalue-credential-leak in sneak/webhooker
2026-08-18 00:52:56 +02:00
clawbot
pushed to issue-160-postformvalue-credential-leak at sneak/webhooker
2026-08-18 00:52:56 +02:00
The receiver's 1 MB body cap lives in the handler, not the middleware the other route groups use
clawbot
deleted branch issue-157-event-body-download from sneak/webhooker
2026-08-18 00:41:33 +02:00
Serve an event's full stored body over HTTP (closes #157)
No in-app way to retrieve an event body larger than the event log's 8 KB render cap
Serve an event's full stored body over HTTP (closes #157)
PASS
Scoped confirmation pass at 5a75f77 in an independent clone, round 3. I did not re-review the code: I relied on sneak/webhooker#167 (comment) and…
Verify login credentials before spending rate-limit budget (closes #150)
FAIL — needs-rework
Central question: can a legitimate operator log in during a sustained saturation attack?
No, not reliably — but the wait is genuinely FIFO and nothing accumulates.…
Run all linting in Docker via Dockerfile.lint (closes #109)
FAIL — needs-rework
Scoped confirmation pass on the README.md merge at cc5836d, not a full re-review. I relied on sneak/webhooker#165 (comment) and…
Assert the access-log encoded-byte charge against every Unicode code point