viettranx 79cae648e4 fix(security): pairing expiry race, sender-ID validation, Slack senderID cleanup ...

- Add expires_at check to ApprovePairing SELECT (PG + SQLite) to close
  race between prune DELETE and code lookup
- Add isValidSenderID regex validation to handleRequest, handleRevoke,
  and handleBrowserPairingStatus (prevents log injection / bus poisoning)
- Add slog.Warn on decrypt fallback paths for downgrade detection
- Remove Slack compound senderID|displayName format; all channels now
  pass plain senderID with displayName in metadata

2026-04-02 20:29:44 +07:00

..

aes_test.go

fix(bus,cron): panic recovery + deadlock fix + unit tests for 9 packages

2026-03-28 18:15:46 +07:00

aes.go

fix(security): pairing expiry race, sender-ID validation, Slack senderID cleanup

2026-04-02 20:29:44 +07:00

apikey.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00