J3vb 827b370ac1 fix: audio cleanup srcObject, diagnostics rate limit, orphan cleanup race (BUG-107, BUG-121, BUG-132) ...

BUG-107: cleanupAllAudioElements now calls pause() and sets
srcObject = null before removing elements from DOM, ensuring streams
are fully released during reconnection cleanup.

BUG-121: Diagnostics endpoint now has 5 req/min rate limit as
documented, preventing enumeration of internal topology.

BUG-132: DeleteOrphanedAttachments uses DELETE ... RETURNING stored_as
(atomic) instead of separate SELECT then DELETE, eliminating the race
where a file could be deleted after its attachment was linked.

2026-04-02 13:45:41 +02:00

..

auth_handler_test.go

fix: per-username login lockout and per-user password confirmation lockout (BUG-110, BUG-111)

2026-04-02 13:12:38 +02:00

auth_handler.go

fix: per-username login lockout and per-user password confirmation lockout (BUG-110, BUG-111)

2026-04-02 13:12:38 +02:00

channel_authz_test.go

fix: exclude DM channels from guild channel listings (BUG-093)

2026-04-02 11:24:43 +02:00

channel_handler_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

channel_handler.go

fix: exclude DM channels from guild channel listings (BUG-093)

2026-04-02 11:24:43 +02:00

client_update_test.go

test: add channel pins, metrics, diagnostics, client-update, middleware tests

2026-03-31 16:27:21 +02:00

client_update.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

clientip_test.go

feat: add Let's Encrypt ACME support, fix security issues, improve server UX

2026-03-15 07:07:59 +01:00

constants.go

fix: add per-user upload rate limit to prevent disk exhaustion (BUG-131)

2026-04-02 13:18:57 +02:00

contract_test.go

fix: address PR review findings (issues #9-#14)

2026-03-17 04:11:04 +01:00

coverage_push_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

diagnostics_handler_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

diagnostics_handler.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

dm_handler_test.go

feat: comprehensive spec docs, test suite, E2E overhaul, and security hardening

2026-03-28 10:39:23 +01:00

dm_handler.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

export_test.go

test: add channel pins, metrics, diagnostics, client-update, middleware tests

2026-03-31 16:27:21 +02:00

invite_handler_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

invite_handler.go

fix: address remaining code review findings (C-3, H-5, H-6, M-1 through M-16)

2026-03-31 19:00:17 +02:00

livekit_proxy_test.go

feat: voice/video polish — refactor, AudioWorklet VAD, bug fixes, UX improvements

2026-03-29 00:51:54 +01:00

livekit_proxy.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

livekit_ratelimit_test.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

metrics_handler_test.go

fix: AdminIPRestrict uses trusted_proxies for real client IP (BUG-116)

2026-04-02 12:15:47 +02:00

metrics_handler.go

feat: voice/video polish — refactor, AudioWorklet VAD, bug fixes, UX improvements

2026-03-29 00:51:54 +01:00

middleware_test.go

fix: AdminIPRestrict uses trusted_proxies for real client IP (BUG-116)

2026-04-02 12:15:47 +02:00

middleware.go

fix: validate proxy IP headers and force attachment for unsafe MIME types (BUG-112, BUG-118)

2026-04-02 13:23:09 +02:00

profile_handler_test.go

fix: close 3 security audit findings (BUG-108, BUG-122, BUG-126)

2026-04-02 10:37:34 +02:00

profile_handler.go

fix: per-username login lockout and per-user password confirmation lockout (BUG-110, BUG-111)

2026-04-02 13:12:38 +02:00

router_test.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

router.go

fix: audio cleanup srcObject, diagnostics rate limit, orphan cleanup race (BUG-107, BUG-121, BUG-132)

2026-04-02 13:45:41 +02:00

totp_handler_test.go

style: apply linter fixes to new test files

2026-04-01 08:48:41 +02:00

totp_handler.go

fix: per-username login lockout and per-user password confirmation lockout (BUG-110, BUG-111)

2026-04-02 13:12:38 +02:00

upload_handler_test.go

fix: add per-user upload rate limit to prevent disk exhaustion (BUG-131)

2026-04-02 13:18:57 +02:00

upload_handler.go

fix: validate proxy IP headers and force attachment for unsafe MIME types (BUG-112, BUG-118)

2026-04-02 13:23:09 +02:00

waf.go

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00