qwc-open/backive

Fork 0

Add safe type assertions in event processing #5

New issue

Closed

opened 2026-02-02 10:00:56 +01:00 by qwc · 0 comments

qwc commented

2026-02-02 10:00:56 +01:00

Owner

Phase 1: Security Hardening

message["data"].(map[string]interface{}) and v.(string) panic on unexpected types.

Tasks

Use comma-ok pattern for all type assertions
Add input length validation on socket reads

Files

events.go

## Phase 1: Security Hardening `message["data"].(map[string]interface{})` and `v.(string)` panic on unexpected types. ### Tasks - Use comma-ok pattern for all type assertions - Add input length validation on socket reads ### Files - `events.go`

qwc added the

Kind/Security

Priority

Medium

labels

2026-02-02 10:05:24 +01:00

qwc referenced this issue from a commit

2026-02-02 13:56:15 +01:00

Security: restrict event socket permissions and add safe type assertions

qwc referenced this issue from a pull request that will close it,

2026-02-02 13:56:25 +01:00

Security hardening: permissions, path validation, script execution #28

qwc closed this issue

2026-02-02 14:09:19 +01:00

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

qwc-open/backive#5

No description provided.

Rows
Columns