clawbot
0 Followers · 0 Following
  • Joined on 2026-02-08
Repositories
1
 Projects Packages Code Public Activity Starred Repositories
clawbot pushed to next at sneak/webhooker 2026-08-18 00:32:31 +02:00
5888d14438 Bound the access log line against client-chosen text (closes #146)
clawbot deleted branch issue-146-bound-access-log-amplification from sneak/webhooker 2026-08-18 00:32:31 +02:00
clawbot merged pull request sneak/webhooker#155 2026-08-18 00:32:29 +02:00
Bound the access log line against client-chosen text (closes #146)
clawbot closed issue sneak/webhooker#146 2026-08-18 00:32:29 +02:00
The access log writes one INFO line with the full attacker-controlled URL per request, including rejected ones
clawbot pushed to next at sneak/webhooker 2026-08-18 00:31:56 +02:00
7702f38168 Mark superseded commits honestly instead of skipped (closes #152)
clawbot deleted branch issue-152-superseded-status from sneak/webhooker 2026-08-18 00:31:56 +02:00
clawbot merged pull request sneak/webhooker#161 2026-08-18 00:31:55 +02:00
Mark superseded commits honestly instead of skipped (closes #152)
clawbot closed issue sneak/webhooker#152 2026-08-18 00:31:55 +02:00
Superseded-run status laundering: a never-tested commit reads green in the combined status
clawbot commented on pull request sneak/webhooker#155 2026-08-18 00:31:16 +02:00
Bound the access log line against client-chosen text (closes #146)

PASS

Reviewed at 74a57ad. No findings. The 2,560-byte ceiling is true; I could not break it.

The central claim, re-verified independently

My own exhaustive audit over all 1,112,064 code…

clawbot commented on pull request sneak/webhooker#161 2026-08-18 00:30:58 +02:00
Mark superseded commits honestly instead of skipped (closes #152)

PASS

Confirmation pass on the three items from sneak/webhooker#161 (comment), head d333572, in my own clone.

  1. script/ci-mark-superseded:126-130 — the…
clawbot created pull request sneak/webhooker#171 2026-08-18 00:22:49 +02:00
Verify login credentials before spending rate-limit budget (closes #150)
clawbot created branch issue-150-login-lockout in sneak/webhooker 2026-08-18 00:22:07 +02:00
clawbot pushed to issue-150-login-lockout at sneak/webhooker 2026-08-18 00:22:07 +02:00
fad97445ca Verify login credentials before spending rate-limit budget (closes #150)
clawbot pushed to issue-109-docker-lint at sneak/webhooker 2026-08-18 00:20:08 +02:00
cc5836d1f9 Run all linting in Docker via Dockerfile.lint (closes #109)
bef9986542 Set fx.StopTimeout inside the container stop grace (closes #134)
Compare 2 commits »
clawbot pushed to issue-157-event-body-download at sneak/webhooker 2026-08-18 00:19:30 +02:00
5a75f770a2 Serve an event's full stored body over HTTP (closes #157)
bef9986542 Set fx.StopTimeout inside the container stop grace (closes #134)
Compare 2 commits »
clawbot pushed to issue-146-bound-access-log-amplification at sneak/webhooker 2026-08-18 00:17:07 +02:00
74a57ad237 Bound the access log line against client-chosen text (closes #146)
bef9986542 Set fx.StopTimeout inside the container stop grace (closes #134)
c3b6623be1 Bucket IPv6 rate-limit keys by /64 (closes #125)
39064a3d6c Correct release-blocking README and startup-warning inaccuracies (closes #151)
Compare 4 commits »
clawbot pushed to issue-152-superseded-status at sneak/webhooker 2026-08-18 00:16:20 +02:00
d333572592 Mark superseded commits honestly instead of skipped (closes #152)
bef9986542 Set fx.StopTimeout inside the container stop grace (closes #134)
Compare 2 commits »
clawbot opened issue sneak/webhooker#170 2026-08-18 00:13:14 +02:00
Clamp the HTTP drain by the tail-hook reserve, not just the Sentry flush
clawbot deleted branch issue-134-fx-stop-timeout from sneak/webhooker 2026-08-18 00:12:53 +02:00
clawbot merged pull request sneak/webhooker#159 2026-08-18 00:12:52 +02:00
Set fx.StopTimeout inside the container stop grace (closes #134)