Repository navigation

Fix the security audit findings: promo caps, keepalive anon access, error text, import DNS pinning - #230

Merged

Programcode merged 7 commits into

mainfrom

fix/security-audit-findings

Oct 24, 2026

Merged

Fix the security audit findings: promo caps, keepalive anon access, error text, import DNS pinning#230
Programcode merged 7 commits into
mainfrom
fix/security-audit-findings

Commits on Oct 24, 2026
- Stop share and create-portal from returning internal error text
  
  Programcode
  and
  claude
  committed
  aa962b8
- Make the keepalive tables service-role only
  
  Programcode
  and
  claude
  committed
  8f6569b
- Claim discount promo codes and apply exactly one Stripe promotion code
  
  Programcode
  and
  claude
  committed
  91d93ba
- Pin import-source connections to the address the SSRF check passed
  
  Programcode
  and
  claude
  committed
  703b02f
- Start the discount recipe from an ended trial so both buttons say Upgrade to Pro
  
  Programcode
  and
  claude
  committed
  4b75a7f
- Give each source address its own connect budget and cancel stalled TLS
  
  Programcode
  and
  claude
  committed
  cad752f
- Merge remote-tracking branch 'origin/main' into fix/security-audit-findings
  
  Programcode
  and
  claude
  committed
  4b0245d