J3vb f40e6787a9 fix: resolve remaining LOW security findings (L2-L14) ...

- Document single-instance requirement for in-memory rate stores (L2)
- Add IsOwnerRole() helper for explicit owner guards (L4)
- WS auth deadline uses request context, not context.Background (L5)
- Double-check voice state before clearing in webhook handler (L8)
- Upload stores measured write size instead of client header.Size (L11)
- Startup warning when config upload size exceeds HTTP body limit (L12)
- Update check endpoint now requires owner role (L13)
- Backup paths resolved to absolute at init time (L14)

2026-04-02 15:22:03 +02:00

..

static

fix: admin panel tab navigation with error boundaries (T-202)

2026-04-01 11:38:24 +02:00

admin_handler_test.go

fix: resolve remaining LOW security findings (L2-L14)

2026-04-02 15:22:03 +02:00

admin.go

fix: add CSRF Origin check to setup endpoint (BUG-097)

2026-04-02 11:54:56 +02:00

api_edge_cases_test.go

fix: add CSRF Origin check to setup endpoint (BUG-097)

2026-04-02 11:54:56 +02:00

api_test.go

fix: add CSRF Origin check to setup endpoint (BUG-097)

2026-04-02 11:54:56 +02:00

api.go

fix: resolve remaining LOW security findings (L2-L14)

2026-04-02 15:22:03 +02:00

handlers_backup_test.go

fix: resolve remaining LOW security findings (L2-L14)

2026-04-02 15:22:03 +02:00

handlers_backup.go

fix: resolve remaining LOW security findings (L2-L14)

2026-04-02 15:22:03 +02:00

handlers_channels_test.go

fix: add CSRF Origin check to setup endpoint (BUG-097)

2026-04-02 11:54:56 +02:00

handlers_channels.go

fix: security hardening — 45 issues from full-project Copilot audit

2026-03-29 12:35:04 +02:00

handlers_settings.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

handlers_users.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

helpers.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

logstream_test.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

logstream.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

middleware_and_spawn_test.go

fix: add CSRF Origin check to setup endpoint (BUG-097)

2026-04-02 11:54:56 +02:00

middleware_coverage_test.go

fix: add CSRF Origin check to setup endpoint (BUG-097)

2026-04-02 11:54:56 +02:00

middleware.go

refactor: extensibility overhaul — handler registry, permission checker, sidebar decomposition, DX improvements

2026-03-29 12:19:08 +02:00

setup_handler_test.go

fix: atomic setup prevents TOCTOU race creating multiple owners (BUG-119)

2026-04-02 12:09:27 +02:00

setup_handler.go

fix: atomic setup prevents TOCTOU race creating multiple owners (BUG-119)

2026-04-02 12:09:27 +02:00

types.go

refactor: extensibility overhaul — handler registry, permission checker, sidebar decomposition, DX improvements

2026-03-29 12:19:08 +02:00

update_handlers_test.go

fix: add CSRF Origin check to setup endpoint (BUG-097)

2026-04-02 11:54:56 +02:00

update_handlers.go

fix: security hardening — 11 findings across auth, WS, upload, admin, data

2026-04-02 14:51:16 +02:00