jevb fa1435e4de fix: address critical and high code review findings ...

- C-1: handle filepath.Abs error in backup path traversal guards
- C-2: WAL checkpoint before live DB restore to prevent corruption
- C-4: default AllowedOrigins to empty (deny cross-origin by default)
- C-5: renumber duplicate 003_ migration prefix (003-008 -> 003-009)
- H-1: sanitize FTS5 query input to prevent operator injection
- H-3: send SIGTERM for graceful shutdown before os.Exit in updater
- H-9: fix RingBuffer memory leak from unbounded backing array growth
- H-10: use errorResponse struct consistently in upload handler

2026-03-31 18:46:33 +02:00

..

auth_handler_test.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

auth_handler.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

channel_authz_test.go

fix: address PR review findings (issues #9-#14)

2026-03-17 04:11:04 +01:00

channel_handler_test.go

fix: address critical and high code review findings

2026-03-31 18:46:33 +02:00

channel_handler.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

client_update.go

fix: resolve CI failures in server lint and client tests

2026-03-19 06:20:00 +01:00

clientip_test.go

feat: add Let's Encrypt ACME support, fix security issues, improve server UX

2026-03-15 07:07:59 +01:00

contract_test.go

fix: address PR review findings (issues #9-#14)

2026-03-17 04:11:04 +01:00

diagnostics_handler.go

fix: security hardening — 45 issues from full-project Copilot audit

2026-03-29 12:35:04 +02:00

dm_handler_test.go

feat: comprehensive spec docs, test suite, E2E overhaul, and security hardening

2026-03-28 10:39:23 +01:00

dm_handler.go

fix: security hardening, DM auth, LiveKit stability, and voice call timer

2026-03-27 16:14:54 +01:00

invite_handler_test.go

feat: LiveKit migration — permissions, auth hardening, voice improvements

2026-03-24 21:30:23 +01:00

invite_handler.go

fix: security hardening — 45 issues from full-project Copilot audit

2026-03-29 12:35:04 +02:00

livekit_proxy_test.go

feat: voice/video polish — refactor, AudioWorklet VAD, bug fixes, UX improvements

2026-03-29 00:51:54 +01:00

livekit_proxy.go

fix: security hardening — 45 issues from full-project Copilot audit

2026-03-29 12:35:04 +02:00

livekit_ratelimit_test.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

metrics_handler.go

feat: voice/video polish — refactor, AudioWorklet VAD, bug fixes, UX improvements

2026-03-29 00:51:54 +01:00

middleware_test.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

middleware.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

router_test.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

router.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

upload_handler.go

fix: address critical and high code review findings

2026-03-31 18:46:33 +02:00