-
Notifications
You must be signed in to change notification settings - Fork 20
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Neither server sets http.Server.MaxHeaderBytes, so one request may carry about a megabyte of headers and request line
goPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#205 In leodip/goiabada;A request that panics is logged with status 0, not 500
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#203 In leodip/goiabada;Security: password and OTP form handlers accept their credential from the query string
goPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#202 In leodip/goiabada;Security: activation and password reset codes travel in the URL query string
goPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#201 In leodip/goiabada;Security: no way to find a grant that was cross-bound before #133, once its session row is gone
enhancementNew feature or requestNew feature or requestgoPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#199 In leodip/goiabada;StartNewUserSession commits the new session before the work that can still fail, so a late error leaves a row nobody can reach
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#198 In leodip/goiabada;Security: an implicit ceremony receives tokens for a session that was already ended
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#197 In leodip/goiabada;Four of the seven rate limiters have no tests
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#195 In leodip/goiabada;Security: the API debug middleware buffers the whole request body before authentication and before the handler's size limit
goPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#190 In leodip/goiabada;Tracked files cite docs/ci-v2-design.md, which is gitignored and not in the repository
documentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#187 In leodip/goiabada;issueAuthCode commits a partial 200 when the form_post template fails part way through rendering
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#160 In leodip/goiabada;The CSS build harvests class names from the whole Go module, not from the template globs its config declares
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#153 In leodip/goiabada;