upaas/internal/handlers
clawbot 0f3e99f7cc test: add IDOR tests for resource deletion ownership verification
Tests demonstrate that env vars, labels, volumes, and ports can be
deleted via another app's URL path without ownership checks.

All 4 tests fail, confirming the vulnerability described in #19.
2026-02-15 20:52:19 -08:00
..
app.go Add build log file storage and download functionality 2026-01-01 06:08:00 -08:00
auth.go Add deployment improvements and UI enhancements 2025-12-30 15:05:26 +07:00
dashboard.go Add real-time deployment updates and refactor JavaScript 2026-01-01 05:22:56 +07:00
handlers_test.go test: add IDOR tests for resource deletion ownership verification 2026-02-15 20:52:19 -08:00
handlers.go Add deployment improvements and UI enhancements 2025-12-30 15:05:26 +07:00
healthcheck.go Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
setup.go Add deployment improvements and UI enhancements 2025-12-30 15:05:26 +07:00
webhook.go Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00