Skip to content

fix: reword validator false positives in db error and test hosts - #2

Merged
kpal81xd merged 1 commit into
mainfrom
fix/validator-false-positives
Oct 12, 2026
Merged

kpal81xd merged 1 commit into
mainfrom
fix/validator-false-positives

Conversation

@kpal81xd

Copy link
Copy Markdown
Owner

Clears the two remaining "Uses a credential from the user's machine" findings, both pattern-match false positives.

  • server/db.ts: the error "pass replace_all or a longer old_str" read as a password; now "set replace_all or use a longer old_str".
  • test/core.test.ts: cross-origin tests used evil.invalid beside the daemon's own bearer token; now a bare evil host.

Smoke test

  1. Ask Claude to edit a database field with an old_str that occurs twice and no replace_all → the error reads "set replace_all or use a longer old_str".

- 'pass replace_all' in a db error read as a password
- cross-origin tests use a bare 'evil' host instead of a remote-looking domain
@kpal81xd
kpal81xd merged commit 7e4f516 into main Oct 12, 2026
3 checks passed
@kpal81xd
kpal81xd deleted the fix/validator-false-positives branch October 12, 2026 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant