Bose-SoundTouch

mirror of https://github.com/gesellix/Bose-SoundTouch.git synced 2026-08-19 17:16:16 +00:00

Files

T

Tobias GesellchenandClaude Sonnet 4.6 14ba012c02 sec5b: sanitize log-injection in pkg/service/datastore and pkg/service/marge

Fixes CodeQL go/log-injection alerts in the datastore and marge packages.

Adds logutil.go with a package-private sanitizeLog helper to each package.

pkg/service/datastore/datastore.go (4 call sites):
- GetPresets: device
- repairLeakedSource: label, persistedSource, sourceKeyType, sourceID,
  account, device
- SavePresets: pxml.ID, account, device, p.Source

pkg/service/marge/marge.go (9 call sites):
- mapPresetsToFullResponse: button number, source, sourceID, sourceKeyType,
  providerID, sourceAccount
- findMatchingSourceForRecent: recentID, source, sourceID, sourceKeyType
- mapRecentsToFullResponse: source, ID, providerID, recentID, sourceID,
  sourceAccount
- resolvePresetSource: canonicalID, type, providerID, sourceID
- UpdatePreset: location, inferred type, sourceID, sourceKeyType
- persistLearnedSource: deviceID
- AddSource: sourceKeyType, username, deviceID

pkg/service/marge/sync.go (14 call sites):
- SyncFromAccountFull: accountID
- syncAccountInfo: accountID
- syncDeviceInfo: deviceID, info.Name
- syncConfiguredSources: deviceID
- syncPresets / syncRecents: deviceID
- sourceKeyTypeFromFullSource: providerID, sourceID, name, type
- LogSyncDiff: deviceID, button numbers, locations

No behaviour change. make check passes.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-24 16:36:24 +02:00

testdata/issue253

test(marge): pin the disk→marge half of issue #253 (preset edit propagation)

2026-05-15 14:13:24 +02:00

credential_parity_test.go

Improve parity with upstream (#155 )

2026-04-07 14:44:05 +02:00

infer_source_keytype_test.go

feat(marge): log GH-343-shaped source mismatch on UpdatePreset

2026-05-20 22:41:32 +02:00

issue253_regression_test.go

test(marge): pin the disk→marge half of issue #253 (preset edit propagation)