akanealw/Charon
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity
Files
6c6c3f3373e43b1a5d7a7c0f645d95bfc8ae312c
Charon/backend/internal/api/handlers
T
History
GitHub Actions cc3cb1da4b fix(security): harden auth cookie to always set Secure attribute 
- Remove the conditional secure=false branch from setSecureCookie that
  allowed cookies to be issued without the Secure flag when requests
  arrived over HTTP from localhost or RFC 1918 private addresses
- Pass the literal true to c.SetCookie directly, eliminating the
  dataflow path that triggered CodeQL go/cookie-secure-not-set (CWE-614)
- Remove the now-dead codeql suppression comment; the root cause is
  gone, not merely silenced
- Update setSecureCookie doc comment to reflect that Secure is always
  true: all major browsers (Chrome 66+, Firefox 75+, Safari 14+) honour
  the Secure attribute on localhost HTTP connections, and direct
  HTTP-on-private-IP access without TLS is an unsupported deployment
  model for Charon which is designed to sit behind Caddy TLS termination
- Update the five TestSetSecureCookie HTTP/local tests that previously
  asserted Secure=false to now assert Secure=true, reflecting the
  elimination of the insecure code path
- Add Secure=true assertion to TestClearSecureCookie to provide explicit
  coverage of the clear-cookie path
2026-03-21 13:17:45 +00:00
..
testdata
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
access_list_handler_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
access_list_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
access_list_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
additional_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
audit_log_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
audit_log_handler.go
fix: improve pagination handling and prevent decompression bombs in backup service
2026-03-07 03:39:54 +00:00
auth_handler_test.go
fix(security): harden auth cookie to always set Secure attribute
2026-03-21 13:17:45 +00:00
auth_handler.go
fix(security): harden auth cookie to always set Secure attribute
2026-03-21 13:17:45 +00:00
backend_coverage.txt
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
backup_handler_sanitize_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
backup_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
backup_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
benchmark_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
cerberus_logs_ws_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
cerberus_logs_ws.go
fix: enhance WebSocket origin check and improve email validation in mail service
2026-03-06 13:50:59 +00:00
certificate_handler_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
certificate_handler_security_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
certificate_handler_test.go
chore: add unit tests for certificate handler, logs websocket upgrader, config loading, and mail service
2026-03-08 05:45:21 +00:00
certificate_handler.go
fix: update notification messages for various handlers to improve clarity and consistency
2026-03-07 05:16:07 +00:00
conversion_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
coverage_helpers_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
coverage_quick_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
credential_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
credential_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_archive_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_archive_validation_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_bouncer_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_cache_verification_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_coverage_boost_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_coverage_gap_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_coverage_target_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_decisions_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_exec_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_exec.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_handler_comprehensive_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_handler_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_lapi_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_presets_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_pull_apply_integration_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_state_sync_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_stop_lapi_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_wave3_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_wave5_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_wave6_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
crowdsec_wave7_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
db_health_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
db_health_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
dns_detection_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
dns_detection_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
dns_provider_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
dns_provider_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
doc.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
docker_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
docker_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
domain_handler_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
domain_handler.go
fix: update notification messages for various handlers to improve clarity and consistency
2026-03-07 05:16:07 +00:00
emergency_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
emergency_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
encryption_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
encryption_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
feature_flags_blocker3_test.go
chore: remove Shoutrrr residue and dead notification legacy code
2026-03-05 00:41:42 +00:00
feature_flags_handler_coverage_test.go
chore: add coverage for default false state of email notifications feature flag
2026-03-05 14:58:21 +00:00
feature_flags_handler_test.go
chore: remove Shoutrrr residue and dead notification legacy code
2026-03-05 00:41:42 +00:00
feature_flags_handler.go
feat: add Telegram notification provider support
2026-03-10 12:14:57 +00:00
handlers_blackbox_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
handlers_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
health_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
health_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
import_handler_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
import_handler_sanitize_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
import_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
import_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
json_import_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
json_import_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
logs_handler_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
logs_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
logs_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
logs_ws_test.go
chore: add unit tests for certificate handler, logs websocket upgrader, config loading, and mail service
2026-03-08 05:45:21 +00:00
logs_ws.go
fix: enhance WebSocket origin check and improve email validation in mail service
2026-03-06 13:50:59 +00:00
manual_challenge_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
manual_challenge_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
misc_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
notification_coverage_test.go
feat: add support for Pushover notification provider
2026-03-16 18:16:14 +00:00
notification_handler_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
notification_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
notification_provider_blocker3_test.go
fix: supply slack webhook token in handler create sub-tests
2026-03-15 15:17:23 +00:00
notification_provider_discord_only_test.go
feat: add support for Pushover notification provider
2026-03-16 18:16:14 +00:00
notification_provider_handler_test.go
chore: add unit tests for Slack and Pushover service flags, and validate Pushover dispatch behavior
2026-03-16 21:38:40 +00:00
notification_provider_handler_validation_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
notification_provider_handler.go
feat: add support for Pushover notification provider
2026-03-16 18:16:14 +00:00
notification_provider_patch_coverage_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
notification_template_handler_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
notification_template_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
npm_import_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
npm_import_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
PATCH_COVERAGE_ANALYSIS.md
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
perf_assert_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
permission_helpers_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
permission_helpers.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
plugin_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
plugin_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
pr_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
proxy_host_handler_security_headers_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
proxy_host_handler_test.go
fix: align test expectations with updated proxy host handler behavior
2026-03-21 03:05:10 +00:00
proxy_host_handler_update_test.go
fix: resolve security header profile preset slugs when assigning via UUID string
2026-03-21 01:59:34 +00:00
proxy_host_handler.go
fix: clarify that advanced_config requires Caddy JSON, not Caddyfile syntax
2026-03-21 02:12:24 +00:00
remote_server_handler_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
remote_server_handler.go
fix: update notification messages for various handlers to improve clarity and consistency
2026-03-07 05:16:07 +00:00
sanitize_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
sanitize.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_event_intake_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
security_geoip_endpoints_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_audit_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_authz_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_cache_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_clean_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_fixed_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_rules_decisions_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_settings_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_test_fixed.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler_waf_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_headers_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_headers_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_notifications_blocker_test.go.archived
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_notifications_compatibility_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_notifications_compatibility_test.go.archived
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_notifications_final_blockers_test.go
feat: add support for Pushover notification provider
2026-03-16 18:16:14 +00:00
security_notifications_patch_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_notifications_single_source_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
security_notifications_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
security_notifications.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_priority_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_ratelimit_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
security_toggles_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
settings_handler_helpers_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
settings_handler_test.go
fix(frontend): stabilize CrowdSec first-enable UX and guard empty-value regression
2026-03-18 16:57:23 +00:00
settings_handler.go
fix: make 'value' field optional in UpdateSettingRequest struct
2026-03-17 01:40:35 +00:00
settings_wave3_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
settings_wave4_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
ssrf_test_helpers_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
system_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
system_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
system_permissions_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
system_permissions_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
system_permissions_wave6_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
testdb_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
testdb.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
update_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
update_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
uptime_handler_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
uptime_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
uptime_monitor_initial_state_test.go
feat: wire MailService into notification dispatch pipeline (Stage 3)
2026-03-06 02:06:49 +00:00
user_handler_coverage_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
user_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
user_handler.go
fix: enhance WebSocket origin check and improve email validation in mail service
2026-03-06 13:50:59 +00:00
user_integration_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
websocket_status_handler_test.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
websocket_status_handler.go
chore: git cache cleanup
2026-03-04 18:34:49 +00:00