clawbot eaf3d48eae fix: dedup env var keys, add IDOR test, enforce body size limit ...

- Server-side duplicate key dedup (last wins) via deduplicateEnvPairs helper
- Cross-app isolation test verifying env var save scopes by app_id
- http.MaxBytesReader wraps request body with 1MB limit
- Test for oversized body rejection (400)

2026-03-10 18:14:20 -07:00

..

config

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

database

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

docker

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

globals

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

handlers

fix: dedup env var keys, add IDOR test, enforce body size limit

2026-03-10 18:14:20 -07:00

healthcheck

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

logger

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

middleware

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

models

fix: remove dead DeleteEnvVarsByAppID and add empty-key 400 test

2026-03-10 17:42:50 -07:00

server

feat: monolithic env var editing (bulk save, no per-var CRUD)

2026-03-10 11:05:19 -07:00

service

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

ssh

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00