sneak/pixa
1
0
Fork 0
Code Issues 5 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

docs: record startup config validation in TODO.md (closes #52)
Some checks failed
check / check (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Jeffrey Paul
2026-08-07 16:37:15 +00:00
parent f4c7dc4cd7
commit 71782f2e9b
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
TODO.md
View File

@@ -27,6 +27,12 @@ returns 410; logout redirects back to login
# Completed Steps # Completed Steps
- 2026-08-07 validate configuration on startup, fail fast on bad
config (closes #52): a config value that is set but unparseable or
invalid aborts startup naming the key and value (defaults apply only
to omitted keys), unknown config keys abort startup, a malformed
config file aborts instead of being skipped, and `state_dir` is
verified creatable and writable before the listener binds
- 2026-08-07 fix the two remaining gosec findings (G124 in - 2026-08-07 fix the two remaining gosec findings (G124 in
internal/session): session cookies now always carry internal/session): session cookies now always carry
Secure/HttpOnly/SameSite=Strict on both the set and clear paths; Secure/HttpOnly/SameSite=Strict on both the set and clear paths;
@@ -55,7 +61,6 @@ returns 410; logout redirects back to login
- P0: implement cache size management and eviction so the disk cannot - P0: implement cache size management and eviction so the disk cannot
fill up fill up
- P0: validate configuration on startup, fail fast on bad config
- P1: implement blocked networks configuration to extend SSRF - P1: implement blocked networks configuration to extend SSRF
protection protection
- P1: rate limit global concurrent upstream fetches to prevent - P1: rate limit global concurrent upstream fetches to prevent