graham/prop - Forgejo: Beyond coding. We forge.

graham/prop

Fork 0

Commit graph

Author	SHA1	Message	Date
Graham McIntire	5ca5edd554	Fix 7 high-severity bugs - mechanism_classifier: add nil guards on get_lat/get_lon (no crash on bad radar lookup) - path_compute: use Map.get with fallback for abs_humidity (no nil * dist_km crash) - beacon_live/index: fix path_with_prefix double-slash with trim_leading - map_live: inline flash rendering instead of calling Layouts.flash_group - runtime.exs: raise on missing EMAIL_SERVER (prevents silent TLS failure) - notify_listener: wrap Task.start in try/rescue (prevents linked crash on GenServer) - notify_listener: add Process.monitor on PG notifications (detect connection loss) - findings.md: remove fixed high-severity items	2026-05-29 15:31:47 -05:00
Graham McIntire	3bdc4b6a11	Fix 4 critical bugs and document remaining findings - TOCTOU race: add partial unique index + rescue constraint violation on concurrent contact insert (radio.ex:737-768) - Mass assignment: remove :user_id from @optional_fields (contact.ex:85) - Stale path_live result: clear result when URL params change (path_live.ex:105) - Blocking migrations: wrap Release.migrate() in Task.start (application.ex:79) - Rate limiter: fix guard for monitor tokens (not is_nil vs is_binary) - findings.md: document remaining non-critical bugs and improvements	2026-05-29 15:27:33 -05:00

Author

SHA1

Message

Date

Graham McIntire

5ca5edd554

Fix 7 high-severity bugs

- mechanism_classifier: add nil guards on get_lat/get_lon (no crash on bad radar lookup)
- path_compute: use Map.get with fallback for abs_humidity (no nil * dist_km crash)
- beacon_live/index: fix path_with_prefix double-slash with trim_leading
- map_live: inline flash rendering instead of calling Layouts.flash_group
- runtime.exs: raise on missing EMAIL_SERVER (prevents silent TLS failure)
- notify_listener: wrap Task.start in try/rescue (prevents linked crash on GenServer)
- notify_listener: add Process.monitor on PG notifications (detect connection loss)
- findings.md: remove fixed high-severity items

2026-05-29 15:31:47 -05:00

Graham McIntire

3bdc4b6a11

Fix 4 critical bugs and document remaining findings

- TOCTOU race: add partial unique index + rescue constraint violation on
  concurrent contact insert (radio.ex:737-768)
- Mass assignment: remove :user_id from @optional_fields (contact.ex:85)
- Stale path_live result: clear result when URL params change (path_live.ex:105)
- Blocking migrations: wrap Release.migrate() in Task.start (application.ex:79)
- Rate limiter: fix guard for monitor tokens (not is_nil vs is_binary)
- findings.md: document remaining non-critical bugs and improvements

2026-05-29 15:27:33 -05:00

2 commits