jevb 384e94d9f9 fix: close 3 security audit findings (BUG-108, BUG-122, BUG-126) ...

BUG-122: Remove channelID==0 bypass in deliverBroadcast that leaked
all channel-scoped broadcasts to unfocused clients. Clients must now
send channel_focus to receive channel events.

BUG-126: Reject edits and reactions on soft-deleted messages in
handleChatEdit and handleReaction.

BUG-108: Revoke all other sessions when a user changes their password
or enables/disables TOTP 2FA. Adds DeleteOtherSessions DB function.

7 new test cases covering all three fixes.

2026-04-02 10:37:34 +02:00

..

account_test.go

test: add server core test coverage (Session 1)

2026-04-01 08:41:09 +02:00

account.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

admin_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

admin_queries.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

attachment_queries_test.go

fix: resolve 1 critical and 5 high security/reliability issues from go-review

2026-03-19 03:53:40 +01:00

attachment_queries.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

auth_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

auth_queries.go

fix: close 3 security audit findings (BUG-108, BUG-122, BUG-126)

2026-04-02 10:37:34 +02:00

backup_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

channel_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

channel_queries.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

coverage_boost_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

db_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

db.go

refactor: context propagation, LogAudit deadlock fix, ESLint v9, code quality

2026-03-29 19:39:46 +02:00

dm_queries_test.go

feat: comprehensive spec docs, test suite, E2E overhaul, and security hardening

2026-03-28 10:39:23 +01:00

dm_queries.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

errors_test.go

test: add server core test coverage (Session 1)

2026-04-01 08:41:09 +02:00

errors.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

invite_queries.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

message_queries_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

message_queries.go

fix: resolve 4 server bugs (Phase 1: BUG-085, BUG-087, BUG-090, BUG-091)

2026-04-01 17:52:06 +02:00

migrate_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

migrate.go

fix: handle BEGIN...END blocks in SQL migration splitter

2026-04-01 15:35:50 +02:00

models_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

models.go

feat: LiveKit video grid improvements, voice state cleanup, and internal tooling

2026-03-31 11:41:59 +02:00

profile_queries_test.go

feat: add user profile management endpoints (T-195)

2026-04-01 11:37:55 +02:00

profile_queries.go

feat: add user profile management endpoints (T-195)

2026-04-01 11:37:55 +02:00

role_invite_queries_test.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

role_queries.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

sanitize_test.go

fix: resolve 4 server bugs (Phase 1: BUG-085, BUG-087, BUG-090, BUG-091)

2026-04-01 17:52:06 +02:00

voice_queries_test.go

feat: LiveKit video grid improvements, voice state cleanup, and internal tooling

2026-03-31 11:41:59 +02:00

voice_queries.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00