Files

GitHub Actions 93894c517b fix(security): resolve API key logging vulnerability and enhance import validation

Critical security fix addressing CWE-312/315/359 (Cleartext Storage/Cookie
Storage/Privacy Exposure) where CrowdSec bouncer API keys were logged in cleartext.
Implemented maskAPIKey() utility to show only first 4 and last 4 characters,
protecting sensitive credentials in production logs.

Enhanced CrowdSec configuration import validation with:
- Zip bomb protection via 100x compression ratio limit
- Format validation rejecting zip archives (only tar.gz allowed)
- CrowdSec-specific YAML structure validation
- Rollback mechanism on validation failures

UX improvement: moved CrowdSec API key display from Security Dashboard to
CrowdSec Config page for better logical organization.

Comprehensive E2E test coverage:
- Created 10 test scenarios including valid import, missing files, invalid YAML,
  zip bombs, wrong formats, and corrupted archives
- 87/108 E2E tests passing (81% pass rate, 0 regressions)

Security validation:
- CodeQL: 0 CWE-312/315/359 findings (vulnerability fully resolved)
- Docker Image: 7 HIGH base image CVEs documented (non-blocking, Debian upstream)
- Pre-commit hooks: 13/13 passing (fixed 23 total linting issues)

Backend coverage: 82.2% (+1.1%)
Frontend coverage: 84.19% (+0.3%)

2026-02-04 00:12:13 +00:00

cmd

fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics

2026-02-03 18:26:32 +00:00

integration

fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics

2026-02-03 18:26:32 +00:00

internal

fix(security): resolve API key logging vulnerability and enhance import validation

2026-02-04 00:12:13 +00:00

pkg/dnsprovider

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

tools

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

.env.example

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

.gitignore

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

.golangci-fast.yml

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

.golangci.yml

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

dns_service_final.txt

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

final_lint.txt

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

full_lint_output.txt

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

go.mod

fix(ci): security toggles tests, CrowdSec response data, and coverage improvement documentation

2026-02-02 11:55:55 +00:00

go.sum

fix(ci): migrate to pure-Go SQLite and GoReleaser v2

2026-01-30 13:57:01 +00:00

handlers_coverage.txt

fix(tests): enhance system settings tests with feature flag propagation and retry logic

2026-02-02 01:14:46 +00:00

manual_challenge_coverage.txt

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

PHASE1_COMPLETION_REPORT.md

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

PHASE1_FIXES.md

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

PHASE1_PROGRESS.md

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

README.md

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

user_handler_coverage.txt

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

README.md

Backend Service

This folder contains the Go API for CaddyProxyManager+.

Prerequisites

Go 1.24+

Getting started

cp .env.example .env # optional
cd backend
go run ./cmd/api

Tests

cd backend
go test ./...