Tobias GesellchenandClaude Opus 4.7 b149580c19 fix(ding): clamp sample rate against int -> uint32 truncation ...

CodeQL flagged the writeWAV cast of strconv.Atoi's result to
uint32 (alert 148). Two-layer defence: the handler rejects
sample-rate query params outside [8000, 192000] before parsing
ever reaches Render, and WithDefaults snaps any out-of-range
caller-supplied SampleRate back to the default before
renderChirp allocates buffers sized by it.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-19 23:20:40 +02:00

..

static

refactor(ding): synthesise on demand instead of vendoring the WAV

2026-05-19 23:20:40 +02:00

testdata/issue285

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

web

feat(health): aggregate device-summary panel on Devices tab

2026-05-19 23:20:40 +02:00

bmx_registry_test.go

test(handlers): use deterministic IP in BMX registry test

2026-05-14 14:49:23 +02:00

bridge_test.go

Fix data race in TestSpotifyBridge

2026-04-06 21:15:15 +02:00

dns_settings_test.go

feat(service): validate server_url and surface resolved DNS intercept IP

2026-05-14 14:49:23 +02:00

docs_consistency_test.go

feat: add group CRUD endpoints (POST add, POST modify, DELETE delete) (#191)

2026-04-28 15:28:38 +02:00

handlers_account_mgmt_test.go

Improve source sync by adding deduction of known source IDs (#167)

2026-04-17 18:50:51 +02:00

handlers_account_mgmt.go

Fix/beautify the account overview

2026-04-23 22:08:54 +02:00

handlers_alexa.go

feat(alexa): stub POST /alexa/certificate with 501 and add voice.api.bose.io to DNS (#200)

2026-05-02 21:37:30 +02:00

handlers_bmx_custom.go

refactor(handlers): split handlers_bmx.go per BMX service

2026-05-17 15:05:39 +02:00

handlers_bmx_orion.go

fix(bmx): relax TuneIn + Orion Authorization gate, log instead

2026-05-17 15:05:39 +02:00

handlers_bmx_registry_availability_test.go

…

handlers_bmx_report_test.go

remove: mirror middleware and parity comparison with Bose cloud

2026-05-17 21:53:33 +02:00

handlers_bmx_siriusxm.go

fix(security): address CodeQL findings on Stockholm + SiriusXM stubs

2026-05-17 15:05:39 +02:00

handlers_bmx_test.go

remove: mirror middleware and parity comparison with Bose cloud

2026-05-17 21:53:33 +02:00

handlers_bmx_tunein_test.go

fix(bmx): relax TuneIn + Orion Authorization gate, log instead

2026-05-17 15:05:39 +02:00

handlers_bmx_tunein.go

fix(bmx): relax TuneIn + Orion Authorization gate, log instead

2026-05-17 15:05:39 +02:00

handlers_bmx.go

feat(bmx): SiriusXM live-adapter logging stub

2026-05-17 15:05:39 +02:00

handlers_catchall_test.go

refactor(handlers): rename proxy-era leftovers to match public names

2026-05-17 21:53:33 +02:00

handlers_catchall.go

refactor(handlers): rename proxy-era leftovers to match public names

2026-05-17 21:53:33 +02:00

handlers_device_summary_test.go

feat(health): aggregate device-summary panel on Devices tab

2026-05-19 23:20:40 +02:00

handlers_device_summary.go

feat(health): aggregate device-summary panel on Devices tab

2026-05-19 23:20:40 +02:00

handlers_ding_test.go

fix(ding): clamp sample rate against int -> uint32 truncation

2026-05-19 23:20:40 +02:00

handlers_ding.go

fix(ding): clamp sample rate against int -> uint32 truncation

2026-05-19 23:20:40 +02:00

handlers_docs.go

fix(security): close go/path-injection alerts via os.Root containment

2026-05-10 15:18:24 +02:00

handlers_etag_account_test.go

Fix ETag for account-level endpoints (#177)

2026-04-20 21:09:00 +02:00

handlers_etag_test.go

…

handlers_events_test.go

…

handlers_events.go

…

handlers_health_checks_test.go

feat(service): add Health tab with datastore checks and quick fixes

2026-05-19 20:00:16 +02:00

handlers_health_checks.go

feat(service): add Health tab with datastore checks and quick fixes

2026-05-19 20:00:16 +02:00

handlers_health_test.go

…

handlers_health.go

feat(service): expose build version on GET / mirroring /health

2026-05-17 19:14:05 +02:00

handlers_logs_test.go

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

handlers_logs.go

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

handlers_marge_stockholm_test.go

…

handlers_marge_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

handlers_marge.go

fix(marge): reject rename PUT mismatch before persisting

2026-05-15 19:04:41 +02:00

handlers_media_test.go

chore(web): remove obsolete jsdiff dependency

2026-05-17 21:53:33 +02:00

handlers_media.go

feat(service): expose build version on GET / mirroring /health

2026-05-17 19:14:05 +02:00

handlers_mgmt_test.go

feat(spotify): improve Spotify registration flow and speaker notification

2026-04-06 22:39:30 +02:00

handlers_mgmt.go

fix(security): close go/reflected-xss alerts via html.EscapeString

2026-05-10 14:30:55 +02:00

handlers_oauth_test.go

remove: proxy forwarding to Bose upstream

2026-05-17 21:53:33 +02:00

handlers_oauth.go

remove: proxy forwarding to Bose upstream

2026-05-17 21:53:33 +02:00

handlers_pairing.go

feat(telnet): add port-17000 migration method and account pairing

2026-05-10 12:43:36 +02:00

handlers_peer_probe.go

feat(service): add passive peer-reachability probe handler

2026-05-11 20:31:24 +02:00

handlers_setup_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

handlers_setup.go

refactor: rename /setup/proxy-settings → /setup/logging-settings

2026-05-17 21:53:33 +02:00

handlers_stats_test.go

…

handlers_stats.go

…

interactions_test.go

remove: mirror middleware and parity comparison with Bose cloud

2026-05-17 21:53:33 +02:00

issue218_regression_test.go

fix(bmx): restore the Authorization gate on /core02/.../orion/station

2026-05-15 14:13:24 +02:00

issue285_regression_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

mac_discovery_integration_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

mac_mapping_integration_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

main_test.go

refactor: rename /setup/proxy-settings → /setup/logging-settings

2026-05-17 21:53:33 +02:00

middleware_peer_observer.go

feat(service): add passive peer-reachability probe handler

2026-05-11 20:31:24 +02:00

middleware_realip_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

middleware_realip.go

feat(handlers): proxy-aware RemoteAddr via opt-in TrustForwardedHeaders

2026-05-10 14:40:15 +02:00

migration_options_test.go

feat(handlers): allow per-field telnet URL keys in migration options

2026-05-11 00:37:11 +02:00

migration_options.go

feat(handlers): allow per-field telnet URL keys in migration options

2026-05-11 00:37:11 +02:00

origin_middleware.go

…

parity_mismatch_repro_test.go

…

parity_mismatch_repro_v2_test.go

…

parity_regression_test.go

Improve parity with upstream (#155)

2026-04-07 14:44:05 +02:00

peer_observer_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

peer_observer.go

feat(service): add passive peer-reachability probe handler

2026-05-11 20:31:24 +02:00

preflight_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

preflight.go

style(preflight): replace if-else chain with switch (gocritic)

2026-05-15 11:03:12 +02:00

prime_spotify_test.go

feat(spotify): wire preset storage end-to-end via server-centric priming (#302)

2026-05-16 22:47:57 +02:00

recent_parity_test.go

…

recorder_middleware.go

remove: mirror middleware and parity comparison with Bose cloud

2026-05-17 21:53:33 +02:00

scmudc_enricher.go

…

server_merge_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

server.go

feat(health): add CA cert expiry check

2026-05-19 23:20:40 +02:00

shortcut_middleware.go

…

snapshot_middleware_test.go

…

snapshot_middleware.go

…

spotify_addition_test.go

…