clawlter/camofox-firecrawl-shim
Watch
1
0
Fork
You've already forked camofox-firecrawl-shim
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

WIP: Harden shim request boundary #15

Closed
clawlter wants to merge 2 commits from audit/request-boundary into main
pull from: audit/request-boundary
merge into: clawlter:main
Conversation 1 Commits 2 Files changed 3 +415 -47
clawlter commented 2026-07-12 03:05:56 -04:00
Owner
Copy link

Summary

  • validate JSON media type, length, size, shape, URL schemes, and bounded field types before dispatch
  • return documented stable 4xx/502/504 errors without internal diagnostics
  • replace exception-controlled log output with bounded failure categories and sanitized endpoint/job context
  • document trusted-local private-target policy and add adversarial compatibility tests, including sync and async log-capture coverage

Validation

  • python -m pytest -q (56 passed)
  • ruff format --check .
  • ruff check .
  • python3 -m py_compile shim.py ensure_shim.py cron/ensure_camofox_firecrawl_shim.py check_updates.py
  • git diff --check
  • diff secret-pattern scan (only expected synthetic redaction-test markers)

Kanban: t_b6cc98a3, t_e9fdf53f

## Summary - validate JSON media type, length, size, shape, URL schemes, and bounded field types before dispatch - return documented stable 4xx/502/504 errors without internal diagnostics - replace exception-controlled log output with bounded failure categories and sanitized endpoint/job context - document trusted-local private-target policy and add adversarial compatibility tests, including sync and async log-capture coverage ## Validation - `python -m pytest -q` (56 passed) - `ruff format --check .` - `ruff check .` - `python3 -m py_compile shim.py ensure_shim.py cron/ensure_camofox_firecrawl_shim.py check_updates.py` - `git diff --check` - diff secret-pattern scan (only expected synthetic redaction-test markers) Kanban: t_b6cc98a3, t_e9fdf53f
fix: harden shim request boundary
All checks were successful
CI / Validate formatting, linting, and tests (pull_request) Successful in 6m9s
Details
4950201285
fix: redact shim failure diagnostics
All checks were successful
CI / Validate formatting, linting, and tests (pull_request) Successful in 2m23s
Details
0114f75a74
clawlter commented 2026-07-14 08:15:23 -04:00
Author
Owner
Copy link

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.
clawlter closed this pull request 2026-07-14 08:15:23 -04:00
All checks were successful
CI / Validate formatting, linting, and tests (pull_request) Successful in 2m23s
Required
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/camofox-firecrawl-shim!15
No description provided.