Issues - webhooker - git.eeqj.de

sneak/webhooker

Labels Milestones New Issue

renderTemplate streams to the ResponseWriter, so a mid-render template error ships a partial page

#123 opened 2026-08-11 15:20:53 +02:00 by clawbot

No JS linting, so the styleguide REPO_POLICIES binds us to is unenforced

#120 opened 2026-08-11 14:45:30 +02:00 by clawbot

CI can report success without running lint or tests, because script/cibuild replays a cached image

#119 opened 2026-08-11 14:38:28 +02:00 by clawbot

Slack webhook credential still leaks via delivery errors, SSRF logs, and the source_logs template data

#118 by clawbot was closed 2026-08-11 15:11:58 +02:00 1.0.0

Page {{define "title"}} blocks never render; every browser tab reads "Webhooker"

#117 opened 2026-08-11 14:32:36 +02:00 by clawbot

HTTP target destination URL is rendered in full and can itself be a bearer credential

#115 opened 2026-08-11 14:28:51 +02:00 by clawbot

Source detail page renders raw target config, exposing the Slack webhook URL credential

#113 by clawbot was closed 2026-08-11 14:37:10 +02:00 1.0.0

Decision: TODO.md Completed Steps guarantees a merge conflict on every unit landing on next

#112 opened 2026-08-10 15:46:14 +02:00 by clawbot

TOP PRIORITY: consolidate all open PRs onto one next branch, one PR

#110 by clawbot was closed 2026-08-11 13:56:44 +02:00

Run all linting in Docker via Dockerfile.lint + script/lint

#109 opened 2026-08-10 13:14:12 +02:00 by clawbot

Session codec max-age still 30 days: bring securecookie codecs in line with the 7-day cap

#108 opened 2026-08-09 08:19:57 +02:00 by clawbot

Two remaining delivery terminal-state gaps: opaque failure and deletion-orphaned retries

#107 opened 2026-08-09 08:13:05 +02:00 by clawbot

script/lint uses the host golangci-lint and a shared cache, so lint results can be wrong in either direction

#106 opened 2026-08-09 08:09:02 +02:00 by clawbot

Pin the pre-reopen close in archiveWriter.sweepExpired (unprotected connection-leak guard)

#103 opened 2026-08-09 07:44:18 +02:00 by clawbot

Shutdown hooks ignore their context and wg.Wait() unbounded

#102 opened 2026-08-09 07:27:39 +02:00 by clawbot

Archive sweep repeats open/prune/close once per database target instead of once per webhook

#101 opened 2026-08-09 07:26:46 +02:00 by clawbot

Follow-ups from the PR #96 re-review: retention bound docs and untested normalisation

#99 opened 2026-08-09 05:11:44 +02:00 by clawbot

Deprecated gomodguard linter in the org-standard .golangci.yml (needs an upstream decision)

#98 opened 2026-08-09 05:01:01 +02:00 by clawbot

CRITICAL: delivery engine and retention reaper both die ~15s after startup (fx OnStart context)

#97 by clawbot was closed 2026-08-10 15:44:56 +02:00

Follow-ups from the PR #92 review: config test hygiene and env docs

#94 opened 2026-08-09 04:08:12 +02:00 by clawbot

1 2 3 4 5