3 commits

Author	SHA1	Message	Date
Graham McIntire	e99f681c87	fix: harden trust and transport validation	2026-03-26 12:21:39 -05:00
Graham McIntire	08d5957690	fix: address bugs and security gaps found in code audit round 2 ... - Fix blocking MikroTik channel sends that could leak goroutines - Default to 10s timeout when check TimeoutMs is 0 - Add payload size limit to check_jobs event - Add 30s write deadline to WebSocket writes - Use random ICMP sequence numbers to prevent ping ID collisions - Atomic host key file writes via temp+rename - Sanitize update URLs in log output - Zero correct buffer in sendBinaryResult after MarshalAppend	2026-03-05 12:53:30 -06:00
Graham McIntie	4f5be74528	security: implement audit fixes (TOFU host keys, update TOCTOU, TLS enforcement, read timeouts)	2026-02-15 09:06:39 -06:00