disinto-admin/disinto
1
0
Fork 0
Code Issues 20 Pull requests Projects Releases Packages Wiki Activity Actions

fix: edge-control: deregister leaks project existence via differing error messages (#1111) #1119

Closed
dev-qwen wants to merge 1 commit from fix/issue-1111 into main
pull from: fix/issue-1111
merge into: disinto-admin:main
Conversation 1 Commits 1 Files changed 1 +11 -12
dev-qwen commented 2026-04-21 12:58:11 +00:00
Collaborator
Copy link

Fixes #1111

Changes

Fixes #1111 ## Changes
dev-qwen added 1 commit 2026-04-21 12:58:12 +00:00
fix: edge-control: deregister leaks project existence via differing error messages (#1111)
Some checks are pending
ci/woodpecker/push/ci Pipeline is pending
Details
ci/woodpecker/pr/ci Pipeline is pending
Details
ci/woodpecker/pr/edge-subpath Pipeline is pending
Details
9cb4da204d 
The deregister command returned "project not found" for non-existent
projects and "pubkey mismatch" for wrong keys, allowing SSH-accessible
attackers to enumerate registered projects. Merge both checks behind a
single "deregister denied" error while preserving audit log entries for
operator investigation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
disinto-admin commented 2026-04-21 15:11:37 +00:00
Owner
Copy link

Closing as part of a factory cleanup sweep.

The dev-agent session that created this PR exited after pr_poll_ci timed out waiting for CI (CI was wedged on the caddy-validate step per #1124 / #1127). Nothing reclaims abandoned PRs currently, so this was sitting stale. The source issue is returned to backlog so a fresh dev-agent session can try again once CI is unblocked. Branch fix/issue-1111 is preserved — if the work on this branch is still useful, it can be reopened or used as a starting point.

Closing as part of a factory cleanup sweep. The dev-agent session that created this PR exited after `pr_poll_ci` timed out waiting for CI (CI was wedged on the `caddy-validate` step per #1124 / #1127). Nothing reclaims abandoned PRs currently, so this was sitting stale. The source issue is returned to `backlog` so a fresh dev-agent session can try again once CI is unblocked. Branch `fix/issue-1111` is preserved — if the work on this branch is still useful, it can be reopened or used as a starting point.
disinto-admin closed this pull request 2026-04-21 15:11:37 +00:00
Some checks are pending
ci/woodpecker/push/ci Pipeline is pending
Required
Details
ci/woodpecker/pr/ci Pipeline is pending
Required
Details
ci/woodpecker/pr/edge-subpath Pipeline is pending
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
action

   
backlog

   
blocked

   
bug-report

   
cannot-reproduce

   
in-progress

   
in-triage

   
needs-triage

   
prediction/actioned

   
prediction/dismissed

   
prediction/unreviewed

   
priority

   
rejected

   
reproduced

   
tech-debt

   
underspecified

   
vision
No labels
action
backlog
blocked
bug-report
cannot-reproduce
in-progress
in-triage
needs-triage
prediction/actioned
prediction/dismissed
prediction/unreviewed
priority
rejected
reproduced
tech-debt
underspecified
vision
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: disinto-admin/disinto#1119
No description provided.
Delete branch "fix/issue-1111"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?