aprs.me/lib/aprsme_web/plugs
Graham McIntire 0f2195ef9d
Some checks failed
Build and Push / Build and Push Docker Image (push) Failing after 2s
security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes
- Content-Security-Policy: nonce-based per-request plug replacing unsafe-inline scripts
- RemoteIp: CIDR-based trust gating via InetCidr, skips forwarded headers from untrusted peers
- Rate limiting: auth pipeline (20/min), LiveView event handlers, existing mobile channel limits
- NetworkPolicy: 4 k8s policies (web ingress, cluster, metrics, egress) for least-privilege networking
- PartitionManager: deadlock retry with exponential backoff in drop_partition
- Tests: reduced parallelism (max_cases 4), packets_test async:false to prevent trigger contention
- k8s: APRS_PASSWORD -> APRS_PASSCODE secretRef, vendor/aprs submodule hardened
2026-07-26 14:04:56 -05:00
..
agent_discovery_links.ex feat: add sitemap.xml, api-catalog, and agent-discovery Link headers 2026-04-17 13:31:21 -05:00
api_csrf.ex fix: close review findings 2026-03-26 12:36:50 -05:00
content_security_policy.ex security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes 2026-07-26 14:04:56 -05:00
health_check.ex fix elixir type warnings 2026-05-29 14:00:29 -05:00
ip_geolocation.ex Log Cloudflare geolocation headers on each request 2026-03-22 16:08:52 -05:00
log_filter.ex Add info logging for mobile websocket events and filter healthcheck logs 2025-10-25 17:04:59 -05:00
rate_limiter.ex security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes 2026-07-26 14:04:56 -05:00
remote_ip.ex security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes 2026-07-26 14:04:56 -05:00
set_locale.ex chore(dialyzer): enable stricter flags and fix 97 resulting findings 2026-04-21 10:07:01 -05:00