Pulse/internal/securityutil
pulse-triage[bot] a186bd205e Fall back when release metadata exceeds bounds
GitHub's release list now exceeds the update check's 1 MiB safety limit,
causing valid installations to report that updates are unavailable. Keep the
bound and use the existing bounded Atom feed only for the typed over-limit
condition so malformed metadata remains a hard error.

Accept both release-name and bare-tag feed entries, and do not substitute the
public GitHub feed for a configured custom update server.

Contract-Neutral: Update discovery error handling only; no wire, persisted-data, or subsystem contract change
Refs: #1881
Change-source: pulse-maintainer
2026-09-04 09:34:59 +01:00
..
httpurl.go Allow local Pulse HTTP agent URLs 2026-07-03 00:24:40 +01:00
httpurl_test.go Harden remaining CodeQL security boundaries 2026-07-09 19:46:40 +01:00
internal_securityutil_storage_branchcov0716_test.go Add Go branch-coverage tests for pure config and helper packages 2026-07-16 10:19:51 +01:00
outbound_http.go Export restricted outbound HTTP security helpers 2026-04-22 10:05:57 +01:00
outbound_http_test.go Harden outbound SSO fetch boundaries 2026-04-01 16:36:44 +01:00
private_path_other.go Enforce native private state permissions 2026-08-30 03:31:00 +01:00
private_path_test.go Enforce native private state permissions 2026-08-30 03:31:00 +01:00
private_path_windows.go Enforce native private state permissions 2026-08-30 03:31:00 +01:00
private_path_windows_test.go Enforce native private state permissions 2026-08-30 03:31:00 +01:00
responsebody.go Fall back when release metadata exceeds bounds 2026-09-04 09:34:59 +01:00
responsebody_test.go Fall back when release metadata exceeds bounds 2026-09-04 09:34:59 +01:00
secure_storage_dir.go Harden remaining CodeQL security boundaries 2026-07-09 19:46:40 +01:00
secure_storage_dir_test.go Harden remaining CodeQL security boundaries 2026-07-09 19:46:40 +01:00
storagepath.go
storagepath_test.go
websocket_origin.go Remove 198 unreachable Go functions 2026-06-03 12:29:37 +01:00