clawbot ca4dadf1eb Refuse a PRIVMSG or NOTICE whose body or meta has the wrong type (closes #245) ...

Over the HTTP API, a PRIVMSG or NOTICE body was checked only by
decoding it into a list of strings. JSON null decodes into an empty
string there, and meta was not checked at all, so a null line, or a
meta that is not an object, reached every recipient.

handlePrivmsg now answers 400 invalid request body, before anything
else, when body is present and is not an array of strings, or meta is
present and is not an object. A missing or empty body still gets
ERR_NOTEXTTOSEND. README.md says so.

Model: opus-5-5

2026-11-02 05:34:23 +00:00

..

api_test.go

Refuse a PRIVMSG or NOTICE whose body or meta has the wrong type (closes #245)

2026-11-02 05:34:23 +00:00

api.go

Refuse a PRIVMSG or NOTICE whose body or meta has the wrong type (closes #245)

2026-11-02 05:34:23 +00:00

auth.go

Refuse passwords over 72 bytes and confirm only stored ones (closes #144)

2026-10-21 05:02:00 +02:00

export_test.go

Register the broker wait before the first poll (closes #157)

2026-10-21 05:31:24 +02:00

handlers.go

Register the broker wait before the first poll (closes #157)

2026-10-21 05:31:24 +02:00

healthcheck.go

feat: add runtime statistics to healthcheck endpoint (#80)

2026-03-17 12:43:39 +01:00

utility_test.go

Run the internal/handlers tests in parallel (closes #194)

2026-10-27 08:28:28 +01:00

utility.go

Compare nicks by exact case everywhere (closes #128)

2026-10-20 16:31:28 +02:00