Skip to content

fix: normalize windows paths in security foot-gun scanner#94

Open
gbasin wants to merge 4 commits intomasterfrom
feat/security-footgun-finder-iter3
Open

fix: normalize windows paths in security foot-gun scanner#94
gbasin wants to merge 4 commits intomasterfrom
feat/security-footgun-finder-iter3

Conversation

@gbasin
Copy link
Owner

@gbasin gbasin commented Feb 22, 2026

Summary

  • add security foot-gun scanner implementation and CI wiring from prior iteration
  • fix Windows path normalization so backslash-delimited paths are scanned instead of skipped
  • add regression tests for Windows-style target-file filtering and finding detection

Validation

  • bun run security:footgun -- --json
  • bun run lint && bun run typecheck && bun run test

gbasin and others added 4 commits February 21, 2026 16:14
…king

Safari PWA on iOS over Tailscale could enter a connect/reconnect loop
after short backgrounds (<30s) that never self-resolved within 10-15s.
Root cause: visibilitychange fires before iOS restores networking, and
zombie WebSocket connections may exhaust the browser's per-origin limit.

- Always force-reconnect on resume (remove verification ping on zombie)
- Add 750ms settle delay before first connect to let iOS restore network
- Use 8s connect timeout on resume (vs 3s) for VPN tunnel recovery
- Track all created sockets; purge leaked zombies on force-reconnect
- Stall detection: after 4 consecutive failures, purge + 5s cooldown
- Enhanced clientLog instrumentation (LOG_LEVEL=debug) for diagnostics

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Nightshift-Task: security-footgun
Nightshift-Ref: https://github.com/marcus/nightshift
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant