Issues - webhooker - git.eeqj.de

sneak/webhooker

Labels Milestones New Issue

Last wall-clock-dependent test: two writes must land inside a real 2s debounce window or correct code reds

#190 opened 2026-08-18 03:59:56 +02:00 by clawbot

If tracing is ever enabled, every Sentry transaction will collapse into one bucket named POST /(redacted)

#185 opened 2026-08-18 02:34:32 +02:00 by clawbot

Nothing bounds username length, and an account with a multi-KB username cannot log in at all

#184 opened 2026-08-18 02:33:32 +02:00 by clawbot

Two writers bypass internal/logger: fx's console logger and the Go runtime

#183 opened 2026-08-18 02:31:57 +02:00 by clawbot

Target.Webhook and Webhook.Targets form a reference cycle that will recurse once anything marshals a preloaded model

#177 opened 2026-08-18 01:10:13 +02:00 by clawbot

The CI workflow step is named "runs make check", which the image has never done

#175 opened 2026-08-18 01:07:52 +02:00 by clawbot

The receiver's 1 MB body cap lives in the handler, not the middleware the other route groups use

#173 opened 2026-08-18 00:41:49 +02:00 by clawbot

Assert the access-log encoded-byte charge against every Unicode code point

#172 opened 2026-08-18 00:32:55 +02:00 by clawbot

Clamp the HTTP drain by the tail-hook reserve, not just the Sentry flush

#170 opened 2026-08-18 00:13:14 +02:00 by clawbot

Restrict /s/* to GET and HEAD — it currently answers POST, PUT and DELETE with 200

#169 opened 2026-08-17 23:45:16 +02:00 by clawbot

Rate-limit key collapses every peer with an empty RemoteAddr into one bucket

#168 opened 2026-08-17 23:38:48 +02:00 by clawbot

static.go embeds the js directory, so a missing fetched asset silently produces a binary with no Alpine

#166 opened 2026-08-17 23:12:31 +02:00 by clawbot

Consider dropping Alpine.js and writing its 19 directive uses directly

#163 opened 2026-08-17 23:01:56 +02:00 by clawbot

middleware tests construct cookie stores by hand, so they no longer match the production store

#154 opened 2026-08-14 06:17:56 +02:00 by clawbot

Form-error paths commit a 4xx before rendering, so a failed render there cannot report 500

#128 opened 2026-08-12 11:46:09 +02:00 by clawbot

No JS linting, so the styleguide REPO_POLICIES binds us to is unenforced

#120 opened 2026-08-11 14:45:30 +02:00 by clawbot

Page {{define "title"}} blocks never render; every browser tab reads "Webhooker"

#117 opened 2026-08-11 14:32:36 +02:00 by clawbot

Decision: TODO.md Completed Steps guarantees a merge conflict on every unit landing on next

#112 opened 2026-08-10 15:46:14 +02:00 by clawbot

Pin the pre-reopen close in archiveWriter.sweepExpired (unprotected connection-leak guard)

#103 opened 2026-08-09 07:44:18 +02:00 by clawbot

Archive sweep repeats open/prune/close once per database target instead of once per webhook

#101 opened 2026-08-09 07:26:46 +02:00 by clawbot

1 2 3 4