user 67460ea6b2 fix: use timing-safe comparison for OPER credentials ...

Replace plain != string comparison with crypto/subtle.ConstantTimeCompare
for both operator name and password checks in handleOper to prevent
timing-based side-channel attacks.

Closes review feedback on PR #82.

2026-03-17 19:42:44 -07:00

..

api_test.go

feat: add OPER command and oper-only WHOIS client info

2026-03-17 19:42:44 -07:00

api.go

fix: use timing-safe comparison for OPER credentials

2026-03-17 19:42:44 -07:00

auth.go

add IP to sessions, IP+hostname to clients

2026-03-17 19:41:25 -07:00

handlers.go

feat: per-channel hashcash proof-of-work for PRIVMSG anti-spam (#79)

2026-03-18 03:40:33 +01:00

healthcheck.go

feat: add runtime statistics to healthcheck endpoint (#80)

2026-03-17 12:43:39 +01:00