3 Commits

Include renames

Author	SHA1	Message	Date
clawbot	5d8e0cf3a0	Pin the HTTP target's unpinned error checks (closes #285) ... withRetry's check on a failed result write could be removed with every test still passing, and so could six other error checks in target_http.go. Each now has a test that fails without it: the circuit breaker learning the answer to a send whose result went unrecorded, the result write for an invalid config, building the request, reading the response body, decoding the target config, and decoding the stored inbound headers. The two backoff lookups' error checks stay unpinned: without them a failed lookup leaves a zero time, which gives the same answer, so no test can tell the difference. Model: opus-5-5	2026-10-02 17:07:30 +00:00
clawbot	03cd1859d7	Add an egress CIDR allowlist to the SSRF guard (closes #204) (#217)	2026-08-20 10:34:42 +02:00
clawbot	7c43e095a6	Mask the webhook credential in delivery errors and logs (closes #118) ... Go embeds the request URL in *url.Error, so any transport failure — DNS, TLS, refused, timeout, SSRF dial block — persisted the full Slack webhook URL into the per-webhook SQLite database via DeliveryResult.Error. That field is tagged json:"error,omitempty", so a future REST API would have served it. maskURLError rebuilds the error preserving Op and the wrapped cause, so DNS vs TLS vs timeout still read differently and errors.Is/As and Timeout() keep working; only path, query and userinfo are dropped. Applied where the errors are born, which covers both the Slack and HTTP targets. url.Parse embeds the URL too, so ValidateTargetURL's parse branch gets the same treatment. The SSRF rejection log now logs the masked URL, and source_logs.html receives view types rather than raw rows, so no config blob is reachable from that template. MaskURL is now the single masker for the whole tree.	2026-08-11 15:11:57 +02:00