graham/prop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
prop/test/microwaveprop
History
Graham McIntire a3b97f9e98
fix(security): mass-assignment on owner edit + 3 minor hardening fixes 
- Radio.normalize_proposed/1 now Map.take/2 the allowed-edit keys
  before normalization. Owner / admin / pending-edit submit paths all
  funnel through this boundary, so a crafted form can no longer
  mass-assign user_id, flagged_invalid, inserted_at, etc. on a
  contact via String.to_existing_atom -> Ecto.Changeset.change.
- Accounts.revoke_api_token/2 rescues Ecto.Query.CastError and
  returns {:error, :not_found} so a malformed UUID in
  DELETE /api/v1/me/api-tokens/:id renders the API's clean 404
  problem+json instead of a 500.
- ProfilesFile.read_etf decodes with :erlang.binary_to_term(bin, [:safe]).
  Defense-in-depth against tampered on-disk profiles (atom-table
  exhaustion via untrusted ETF).
- Regression tests: contact_edit_test.exs covers the rejected
  mass-assignment fields; accounts_api_token_test.exs covers the
  malformed-UUID path.
2026-05-11 19:04:16 -05:00
..
accounts feat: secure /api/v1 REST API for regular-user actions 2026-05-09 08:59:54 -05:00
aprs fix(aprs): tighten PathParser self-loop check and Q-construct regex 2026-05-01 12:40:17 -05:00
backtest test: lift coverage to 85% and pin threshold 2026-05-08 13:59:56 -05:00
beacons test: cover beacons/beacon schema 2026-04-16 14:09:45 -05:00
buildings test: lift coverage to 85% and pin threshold 2026-05-08 13:59:56 -05:00
canopy test: PromEx + Canopy.BulkFetch + Maidenhead.valid? coverage 2026-05-08 10:06:36 -05:00
commercial test: format all test files + GridCache Valkey backend (49%->74%) 2026-05-07 16:04:32 -05:00
ionosphere fix(ionosphere): disable TLS verify for GIRO to unbreak ionosonde fetch 2026-04-22 09:49:03 -05:00
propagation test: lift coverage to 85% and pin threshold 2026-05-08 13:59:56 -05:00
pskr test: lift coverage to 85% and pin threshold 2026-05-08 13:59:56 -05:00
qrz test: cover qrz/client 2026-04-16 14:10:50 -05:00
radio fix(security): mass-assignment on owner edit + 3 minor hardening fixes 2026-05-11 19:04:16 -05:00
rover test: bump coverage 80% -> 81.3% via more LiveView + module tests 2026-05-08 09:10:34 -05:00
rover_planning test: push coverage 79.64% -> 80.04% across multiple modules 2026-05-08 08:42:03 -05:00
space_weather chore: delete dead RTMA + METAR5 code paths 2026-05-04 15:09:19 -05:00
terrain test: format all test files + GridCache Valkey backend (49%->74%) 2026-05-07 16:04:32 -05:00
valkey test: 100% coverage push — Valkey.RedixAdapter, Buildings.BulkFetch, AprsRepo, Maidenhead, Canopy 2026-05-08 10:01:28 -05:00
weather test: lift coverage to 85% and pin threshold 2026-05-08 13:59:56 -05:00
workers test: more Weather + RoverLive + GefsFetchWorker coverage tests 2026-05-08 09:46:16 -05:00
accounts_api_token_test.exs fix(security): mass-assignment on owner edit + 3 minor hardening fixes 2026-05-11 19:04:16 -05:00
accounts_test.exs feat(auth): self-service password reset 2026-04-18 08:42:35 -05:00
application_test.exs test: lift coverage to 85% and pin threshold 2026-05-08 13:59:56 -05:00
aprs_repo_test.exs test: 100% coverage push — Valkey.RedixAdapter, Buildings.BulkFetch, AprsRepo, Maidenhead, Canopy 2026-05-08 10:01:28 -05:00
aprs_test.exs feat(aprs): add Aprs context for read-only queries against aprs.me 2026-05-01 12:47:35 -05:00
backtest_test.exs Phase 9.1: Consolidated backtest report and contest log import 2026-04-10 11:57:15 -05:00
beacon_monitors_test.exs hardening: Rust worker circuit-breaker + delete wall-clock sleep from beacon test 2026-04-21 18:02:46 -05:00
beacons_test.exs User profiles at /u/:callsign, flexible band input, assorted UX cleanup 2026-04-12 16:13:08 -05:00
cache_test.exs fix(cache): add periodic TTL sweeper to bound ETS growth 2026-04-21 13:19:53 -05:00
callsign_location_test.exs Drop gridmap.org dependency, resolve callsigns locally 2026-04-12 17:43:29 -05:00
canopy_test.exs test: 100% coverage push — Valkey.RedixAdapter, Buildings.BulkFetch, AprsRepo, Maidenhead, Canopy 2026-05-08 10:01:28 -05:00
commercial_test.exs Wire NEXRAD, native ducts, and commercial links into scoring 2026-04-13 12:08:15 -05:00
format_property_test.exs test: cover Format.number/bytes, Instrument.span, SolarClient edges 2026-04-23 14:09:13 -05:00
format_test.exs feat(format): miles-primary distance formatting sitewide 2026-04-18 15:53:40 -05:00
geo_property_test.exs test(property): add property tests for terrain + atmospheric math 2026-04-21 13:56:39 -05:00
geo_test.exs test: cover geo, qrz record, callsign client 2026-04-16 14:09:44 -05:00
geocoder_test.exs Drop gridmap.org dependency, resolve callsigns locally 2026-04-12 17:43:29 -05:00
instrument_test.exs test: cover Format.number/bytes, Instrument.span, SolarClient edges 2026-04-23 14:09:13 -05:00
logger_format_test.exs test: silence expected warnings/errors during test runs 2026-04-24 09:27:17 -05:00
markdown_test.exs fix(docs): render API reference bullets correctly + tighter reading column 2026-05-09 09:46:45 -05:00
moon_test.exs feat(eme): add /eme Earth-Moon-Earth calculator 2026-04-23 16:18:20 -05:00
oban_error_reporter_test.exs feat(observability): attach Oban exception telemetry tap 2026-04-21 14:13:53 -05:00
partition_manager_property_test.exs perf+test: cache nearest_hrrr per cell, batch pg_inherits, +property tests 2026-05-05 17:40:13 -05:00
partition_manager_test.exs perf+test: cache nearest_hrrr per cell, batch pg_inherits, +property tests 2026-05-05 17:40:13 -05:00
prom_ex_test.exs prom: wire rust workers into prometheus 2026-05-08 10:36:49 -05:00
propagation_test.exs feat(scoring): aurora boost on VHF/low-UHF during geomagnetic storms 2026-05-04 16:02:49 -05:00
pskr_test.exs test: lift coverage to 85% and pin threshold 2026-05-08 13:59:56 -05:00
qrz_test.exs Drop gridmap.org dependency, resolve callsigns locally 2026-04-12 17:43:29 -05:00
radio_refinement_test.exs CSV/ADIF import: upsert existing contacts on grid/mode refinement 2026-04-16 10:57:37 -05:00
radio_test.exs fix(security,perf): address 9 audit findings (access control, DoS, crashes) 2026-05-11 18:53:21 -05:00
release_test.exs test: push line coverage from 71.7% → 78.67% 2026-04-23 18:43:18 -05:00
repo_listener_test.exs test: cover repo_listener 2026-04-16 14:58:55 -05:00
rover_planning_test.exs feat(rover-planning): multi-band missions + smart reconcile 2026-05-03 14:08:49 -05:00
rover_test.exs feat(rover): user-scoped FixedStation context with ownership guard 2026-04-25 16:26:33 -05:00
terrain_test.exs Rename qsos table to contacts, qso_id to contact_id 2026-04-02 15:52:19 -05:00
valkey_test.exs test: format all test files + GridCache Valkey backend (49%->74%) 2026-05-07 16:04:32 -05:00
weather_extra_test.exs chore: delete dead RTMA + METAR5 code paths 2026-05-04 15:09:19 -05:00
weather_grid_test.exs perf(weather): cache forecast-hour grids in GridCache to skip ScalarFile decode 2026-04-29 13:10:12 -05:00
weather_test.exs test: more Weather + RoverLive + GefsFetchWorker coverage tests 2026-05-08 09:46:16 -05:00