sneak f76a175091 Pin the body cap's order in every page route group (closes #93) ...

A route test now posts an oversized body with no session or CSRF
token to a POST route in each page route group that has one, and
requires 413 with no CSRF cookie. Before, only the login form pinned
the cap ahead of CSRF; reordering the /hooks or /hook groups failed
nothing.

The MaxBodySize doc comment says other methods pass uncapped on
purpose, the middleware test comment names the helper it describes,
and NewRouterForTest says why its hand-built Server is enough. The
README already described the cap's position correctly.

Model: opus-5-5

2026-10-02 14:54:59 +00:00

..

alpine_browser_test.go

Load Alpine's CSP build so the UI's directives run (closes #371)

2026-10-02 16:09:03 +02:00

bind_address_test.go

Bind the app port deliberately and document the proxy deployment (closes #268) (closes #226)

2026-08-24 03:38:44 +02:00

early_shutdown_test.go

Bind the app port deliberately and document the proxy deployment (closes #268) (closes #226)

2026-08-24 03:38:44 +02:00

error_page_test.go

Say what each action did in a one-line notice (closes #383)

2026-10-02 10:30:31 +02:00

export_test.go

Pin the body cap's order in every page route group (closes #93)

2026-10-02 14:54:59 +00:00

http.go

Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)

2026-08-24 04:25:29 +02:00

listen_failure_test.go

Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)

2026-08-24 04:25:29 +02:00

recoverer_test.go

Report handler panics through the logger and answer 500 (closes #187)

2026-08-18 08:33:12 +02:00

response_controller_test.go

Let a handler flush or set a write deadline through the access log and metrics (closes #191)

2026-10-02 13:08:54 +02:00

routes_test.go

Pin the body cap's order in every page route group (closes #93)

2026-10-02 14:54:59 +00:00

routes.go

Say at the receiver route where its 1 MB body cap lives (closes #173)

2026-10-02 13:40:00 +02:00

sentry_failure_test.go

Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)

2026-08-24 04:25:29 +02:00

sentry_test.go

Move webhook pages to /hook/ID and inbound URLs to /h/UUID (closes #367)

2026-10-02 06:32:14 +02:00

sentry.go

Move webhook pages to /hook/ID and inbound URLs to /h/UUID (closes #367)

2026-10-02 06:32:14 +02:00

server.go

Remove the no-op MAINTENANCE_MODE setting (closes #317)

2026-10-02 13:27:43 +02:00

settings_test.go

Add a read-only Settings page for the loaded configuration (closes #402)

2026-10-02 12:30:21 +02:00

shutdown_test.go

Set fx.StopTimeout inside the container stop grace (closes #134)

2026-08-18 00:12:51 +02:00

static_assets_test.go

Commit the Alpine.js tarball in 3p/ and extract it at build time (closes #345)

2026-10-01 22:44:41 +02:00