Tobias GesellchenandClaude Opus 4.8 0cdf8deb3b fixup: refine CodeQL XSS autofix (fakespeaker round-trip + lint) ...

Follow-up to the Copilot Autofix commit for the reflected-XSS finding.

- fakespeaker buildAddGroupResponse: the autofix modelled only
  name/master/slave, dropping the posted masterDeviceId, roles, id, and
  senderIPAddress that the client (pkg/models.Group) actually sends and
  TestFakeSpeakerAddGroupEchoesWithGroupOK expects to survive the echo.
  Parse into the canonical models.Group and re-marshal it, so values stay
  XML-escaped (CodeQL-clean) and the fake can't drift from the real
  request schema. Updates the now-stale doc comment.
- marge ProviderSettingsToXML / fakespeaker: satisfy golangci-lint
  (wsl_v5 cuddled type decls, gofmt trailing blank lines) the autofix
  left behind.

make lint clean; marge, handlers, and fakespeaker suites pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 21:36:01 +02:00

..

testdata

fix(setup): fire <sourcesUpdated/> after data sync to recover post-factory-reset sources

2026-05-15 16:25:07 +02:00

fakespeaker_test.go

fix(setup): fire <sourcesUpdated/> after data sync to recover post-factory-reset sources

2026-05-15 16:25:07 +02:00

fakespeaker.go

fixup: refine CodeQL XSS autofix (fakespeaker round-trip + lint)

2026-06-14 21:36:01 +02:00

telnet_test.go

feat(screenshots): add headless-Chrome capture pipeline with fake speaker

2026-05-11 20:37:23 +02:00

telnet.go

feat(screenshots): add headless-Chrome capture pipeline with fake speaker

2026-05-11 20:37:23 +02:00