mirror of
https://github.com/J3vb/OwnCord.git
synced 2026-09-03 03:50:00 +03:00
feat: TOFU cert pinning, settings cache refactor, ban enforcement, and 80%+ test coverage
- Implement TOFU certificate pinning in Rust WS proxy with accept_cert_fingerprint command - Refactor settings cache from package-level globals to Hub methods (eliminates global state) - Add runtime ban check on WS message handling (kicks banned users mid-session) - Sanitize reaction error messages to prevent IDOR information leaks - Add slog error logging to REST handlers (channel, invite, search) - Handle channel_delete for active channel in client dispatcher - Add certMismatchBlock to prevent auto-reconnect on TOFU mismatch - Consolidate root-level spec docs into docs/brain/06-Specs/ vault - Add 80%+ test coverage for ws (80.9%) and admin (81.7%) packages - Delete completed TODOS.md (all items resolved)
This commit is contained in:
+1
-1
@@ -18,7 +18,7 @@ MIGRATION-PLAN.md
|
||||
TESTING-STRATEGY.md
|
||||
CLIENT-ARCHITECTURE.md
|
||||
docs/superpowers/
|
||||
|
||||
docs/brain/
|
||||
# Server runtime artifacts
|
||||
Server/chatserver.exe
|
||||
Server/config.yaml
|
||||
|
||||
Reference in New Issue
Block a user