3 Commits

Include renames

Author	SHA1	Message	Date
Tobias GesellchenandClaude Sonnet 4.6	3d8e08d11a	sec5d: sanitize log-injection in soundtouchweb, stockholm, zeroconf ... Fixes CodeQL go/log-injection alerts in three packages. Adds logutil.go with a package-private sanitizeLog helper to each. pkg/service/soundtouchweb/discovery.go (2 call sites): - host, source (device fetch failure) - source, info.Name, info.Type, host (device added) pkg/service/soundtouchweb/websocket.go (9 call sites): - deviceID across connect/disconnect/upgrade/read/ping/status messages pkg/service/stockholm/bridge.go (2 call sites): - method, clientID (dispatch trace) - clientID, msg (log bridge method) pkg/service/stockholm/discovery.go (2 call sites): - host (fetch failure) - host, info.MargeAccountUUID, expectedAccountID (skipping device) pkg/service/stockholm/static.go (1 call site): - r.URL.Path (path-traversal rejection) pkg/service/zeroconf/zeroconf.go (2 call sites): - username (logAddUserNoOp) - username, server, ct, cl, bodySummary (logAddUserFailure) No behaviour change. golangci-lint and make check pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-24 16:52:53 +02:00
Tobias GesellchenandClaude Opus 4.7	1f61a81841	refactor(stockholm): extract kiloDefaultValue with provenance comment ... The Stockholm "kilo" constant (a7928d7b43dcd49f0af31e5aeed26458) was duplicated as a string literal in bridge.go and state.go. To a future reader the hex blob can read like a leaked secret, which it is not — it's a published default carried over from the upstream krahl/soundcork-stockholm-app project (BackendApplication.java). The Stockholm JS expects exactly this value via getConstant("kilo") when nothing else has stored a different one. Promote to a named const in util.go with the explanation, and reference it from both call sites. Tests keep the literal so they continue to catch any accidental change to the wire value. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-17 15:05:39 +02:00
Tobias GesellchenandClaude Sonnet 4.6	6fb999435a	feat(stockholm): add Go backend integration for Stockholm frontend ... Implements pkg/service/stockholm with bridge (appSend/runQueue), HTTP proxy, static serving, config URL rewriting, native state persistence, and device discovery. Mounts under a configurable base path (/stockholm by default) with correct http.StripPrefix routing and apiBase-prefixed bridge API routes matching the patched JS window.__stockholmBase calls. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-17 15:05:39 +02:00