Skip to content

feat: add security foot-gun finder#92

Open
gbasin wants to merge 3 commits intomasterfrom
feat/security-footgun-finder
Open

feat: add security foot-gun finder#92
gbasin wants to merge 3 commits intomasterfrom
feat/security-footgun-finder

Conversation

@gbasin
Copy link
Owner

@gbasin gbasin commented Feb 22, 2026

Summary

  • add a repo-local static scanner for common security foot-guns in src/ and scripts/
  • add scripts/security-footgun.ts CLI with --help, --json, --threshold, and deterministic exit codes
  • wire scanner into npm scripts, CI, and README usage/policy docs

Validation

  • bun run security:footgun -- --json
  • bun run lint && bun run typecheck && bun run test

gbasin and others added 3 commits February 21, 2026 16:14
…king

Safari PWA on iOS over Tailscale could enter a connect/reconnect loop
after short backgrounds (<30s) that never self-resolved within 10-15s.
Root cause: visibilitychange fires before iOS restores networking, and
zombie WebSocket connections may exhaust the browser's per-origin limit.

- Always force-reconnect on resume (remove verification ping on zombie)
- Add 750ms settle delay before first connect to let iOS restore network
- Use 8s connect timeout on resume (vs 3s) for VPN tunnel recovery
- Track all created sockets; purge leaked zombies on force-reconnect
- Stall detection: after 4 consecutive failures, purge + 5s cooldown
- Enhanced clientLog instrumentation (LOG_LEVEL=debug) for diagnostics

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Nightshift-Task: security-footgun
Nightshift-Ref: https://github.com/marcus/nightshift
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant