Tobias GesellchenandClaude Sonnet 5 0489dd39cb fix(admin): stop Save Settings from dropping fields the UI doesn't manage ...

HandleUpdateSettings and HandleUpdateLoggingSettings each built a fresh
datastore.Settings{} from scratch before saving, so any field not covered
by that handler's own DTO (e.g. hand-edited trust_forwarded_headers /
trusted_proxy_cidrs) was silently reset to its zero value on every save.
Load the persisted settings first and overlay only the fields each
handler actually owns, matching the pattern already used elsewhere
(addMargeHostToTLSFix).

Fixes #589

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-29 19:05:49 +02:00

..

amazon

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

bmx

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

certmanager

sec4: fix unhandled writable file close; ignore CODE-SCANNING-NOTES.md

2026-05-24 15:52:35 +02:00

constants

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

datastore

docs(clientip): document X-Forwarded-For-only proxy client-IP resolution

2026-06-28 13:15:49 +02:00

ding

fix(health): skip fetchHealth re-render for non-resolving quick fixes

2026-05-27 21:20:58 +02:00

export

feat(export): encrypted diagnostic report for issue reporting

2026-05-21 20:02:57 +02:00

handlers

fix(admin): stop Save Settings from dropping fields the UI doesn't manage

2026-07-29 19:05:49 +02:00

health

feat(health): flag speakers whose runtime bmxRegistryUrl is still on the Bose cloud (#577)

2026-07-26 21:11:10 +02:00

logbuf

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

marge

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

proxy

sec8: move lgtm annotation above log.Printf to suppress CodeQL alert #294

2026-05-25 20:06:36 +02:00

setup

fix(setup): re-install the CA when it was regenerated, not just label-matched (refs #517)

2026-06-27 19:58:19 +02:00

soundtouchweb

feat(player): add name/IP device sort toggle (#571) (#576)

2026-07-17 17:46:53 +02:00

spotify

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

stations

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

stockholm

fix(lint): sec6/sec7 post-pass — static.go Close + remove unused sanitizeErr

2026-05-25 11:28:26 +02:00

testing/fakespeaker

fixup: refine CodeQL XSS autofix (fakespeaker round-trip + lint)

2026-06-14 21:36:01 +02:00

tts

fix(tts): play via LOCAL_INTERNET_RADIO; accept app_key at /v1/auth

2026-05-31 22:35:31 +02:00

zeroconf

sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136)

2026-05-25 21:17:57 +02:00