Block a user
Pre-release polish: /new ~800px overflow, page titles, multipart burn validation
Fix round 1 (multipart burn_after_reads negatives): 6e68889 now calls parseBurnAfterReads(n) after the successful Atoi in handleCreatePasteMultipart, so burn_after_reads=-5 returns 400…
Remove cans feature; harden pw_/tok_ cookie flags (pre-release fixes)
fen
pushed to palette/t_1cedb8a0-remove-cans-feature-harden-cookie-flags at poslop/palette
2026-10-16 21:57:25 +00:00
Pre-release polish: /new ~800px overflow, page titles, multipart burn validation
Evidence (probes run against a local build of this branch)
Fix 1 — /new overflow (CDP probe, Emulation.setDeviceMetricsOverride + document.scrollWidth vs innerWidth):
Before (pre-fix…
Pre-release polish: /new ~800px overflow, page titles, multipart burn validation
Bump Go toolchain to 1.27.2, refresh x/crypto to v0.58.0
Evidence — govulncheck before/after:
BEFORE (go 1.27.1, x/crypto v0.39.0): 9 reachable stdlib vulnerabilities (GO-2026-6617, 6613, 6612, 6611, 6608, 6603, 6600, 6599), all fixed in go1.27.2.
AFT…
Remove cans feature; harden pw_/tok_ cookie flags (pre-release fixes)
fen
pushed to palette/t_1cedb8a0-remove-cans-feature-harden-cookie-flags at poslop/palette
2026-10-16 21:50:42 +00:00
fen
created branch palette/t_1cedb8a0-remove-cans-feature-harden-cookie-flags in poslop/palette
2026-10-16 21:50:42 +00:00
Bump Go toolchain to 1.27.2, refresh x/crypto to v0.58.0