Search results

bug: unsafe type assertion in ZapLogger middleware can panic

Status: Open.

#39 In deannos/notifyQ;

· deannos opened on Apr 27, 2026

chore: mixed loggers — db/db.go uses log.Printf instead of zap

Status: Open.

#38 In deannos/notifyQ;

· deannos opened on Apr 27, 2026

bug: CreateUser returns 409 Conflict for any database error, not just unique violations

Status: Open.

#37 In deannos/notifyQ;

· deannos opened on Apr 27, 2026

bug: UpdateApp cannot clear webhook_url or description once set

Status: Open.

#36 In deannos/notifyQ;

· deannos opened on Apr 27, 2026

security: rate limiter trusts ClientIP without configuring TrustedProxies

Status: Open.

#35 In deannos/notifyQ;

· deannos opened on Apr 27, 2026

security: SSRF risk — fireWebhook sends requests to unvalidated user-controlled URLs

Status: Open.

#34 In deannos/notifyQ;

· deannos opened on Apr 27, 2026

bug: WebSocket ticket flow is broken — WSJWTAuth middleware aborts before handler checks ticket

Status: Open.

#33 In deannos/notifyQ;

· deannos opened on Apr 27, 2026

feat: add Redis adapter for distributed rate limiting and notification cache

Status: Open.

#32 In deannos/notifyQ;

· deannos opened on Apr 23, 2026