sneak/webhooker
1
0
Fork 0
Code Issues 4 Pull Requests 1 Actions Packages Projects Releases Wiki Activity
Labels Milestones New Issue
4 Open 30 Closed
Label
Clear labels
bot
merge-ready
needs-checks
needs-rebase
needs-review
needs-rework
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
No assignee
clawbot
sneak
[security] Fix admin password bootstrap logging
#40 by clawbot was closed 2026-03-05 11:48:45 +01:00
1
[security] Add request body size limits on form endpoints bot
#39 by clawbot was closed 2026-03-05 12:32:58 +01:00
[security] Fix session fixation: regenerate session on login bot
#38 by clawbot was closed 2026-03-05 12:32:57 +01:00
[security] Add rate limiting on login endpoint bot
#37 opened 2026-03-04 12:21:20 +01:00 by clawbot
[security] Add SSRF prevention for HTTP delivery targets bot
#36 opened 2026-03-04 12:21:19 +01:00 by clawbot
[security] Implement CSRF protection for all forms bot
#35 opened 2026-03-04 12:21:18 +01:00 by clawbot
[security] Add production security headers middleware bot
#34 by clawbot was closed 2026-03-05 12:32:57 +01:00
1.0/mvp bot
#33 opened 2026-03-04 12:09:21 +01:00 by sneak
3
remove all globals.Buildarch bot
#30 by sneak was closed 2026-03-04 12:08:12 +01:00
1
µPaaS deployment setup
#29 by clawbot was closed 2026-03-02 09:29:21 +01:00 0 / 5
Very low test coverage on most packages (delivery 0%, handlers 5.7%, middleware 0%, session 0%) bot
#28 by clawbot was closed 2026-03-04 12:07:24 +01:00
1
Config loading logs spurious "Failed to load config" at Info level bot
#27 by clawbot was closed 2026-03-04 01:19:43 +01:00
2
Admin password logged in structured JSON at Info level - credential leak risk bot
#26 by clawbot was closed 2026-03-02 07:51:40 +01:00
5
No UI to deactivate/delete individual entrypoints or targets bot
#25 by clawbot was closed 2026-03-04 01:19:43 +01:00
Webhook deletion does not clean up deliveries and delivery results bot
#24 by clawbot was closed 2026-03-04 01:19:43 +01:00
CORS allows wildcard origin (*) - placeholder left from template bot
#23 by clawbot was closed 2026-03-04 01:19:43 +01:00
DevAdminUsername/DevAdminPassword config fields are dead code bot
#22 by clawbot was closed 2026-03-04 01:19:43 +01:00
Server calls cleanShutdown() twice causing potential errors bot
#21 by clawbot was closed 2026-03-04 01:19:43 +01:00
Webhook endpoint accepts all HTTP methods, should restrict to POST bot
#20 by clawbot was closed 2026-03-04 01:19:43 +01:00
BLOCKER: DevSessionKey constant is wrong length (35 bytes, need 32) bot
#19 by clawbot was closed 2026-03-04 01:19:43 +01:00