clawbot eaf3d48eae fix: dedup env var keys, add IDOR test, enforce body size limit ...

- Server-side duplicate key dedup (last wins) via deduplicateEnvPairs helper
- Cross-app isolation test verifying env var save scopes by app_id
- http.MaxBytesReader wraps request body with 1MB limit
- Test for oversized body rejection (400)

2026-03-10 18:14:20 -07:00

..

api_test.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

api.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

app_name_validation_test.go

Add server-side app name validation (closes #37)

2026-02-15 22:06:08 -08:00

app_name_validation.go

Add server-side app name validation (closes #37)

2026-02-15 22:06:08 -08:00

app.go

fix: dedup env var keys, add IDOR test, enforce body size limit

2026-03-10 18:14:20 -07:00

auth.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

dashboard.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

export_test.go

fix: resolve lint issues in handlers and middleware

2026-02-20 03:35:44 -08:00

handlers_test.go

fix: dedup env var keys, add IDOR test, enforce body size limit

2026-03-10 18:14:20 -07:00

handlers.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

healthcheck.go

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

port_validation_test.go

fix: resolve all golangci-lint issues

2026-02-15 21:55:24 -08:00

render_template_test.go

fix: buffer template execution to prevent corrupt HTML responses (closes #42)

2026-02-15 22:04:09 -08:00

repo_url_validation_test.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

repo_url_validation.go

fix: resolve lint issues in handlers and middleware

2026-02-20 03:35:44 -08:00

sanitize_test.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

sanitize.go

feat: sanitize container log output beyond Content-Type

2026-02-20 02:54:16 -08:00

setup.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

tail_validation_test.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

volume_validation_test.go

feat: edit existing env vars, labels, and volume mounts

2026-02-16 00:26:07 -08:00

webhook_events.go

feat: add webhook event history UI page (#164)

2026-03-10 18:53:58 +01:00

webhook.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00