Audit 0.20.0 on 103 projects: crash and hang fixes, security checks, precision caps - #26

Merged

tauanbinato merged 39 commits into

mainfrom

Sep 26, 2026

Commits on Sep 26, 2026

Step over characters of several bytes when splitting SQL
tauanbinato
committed
c713d8e
Find the line of a byte inside a character without slicing
tauanbinato
committed
32ddecc
Skip a document that is not text instead of failing the run
tauanbinato
committed
59fe6d6
Work out which files import which once per file
tauanbinato
committed
7bfd66c
Tell access control who may call a function and that shared rows are the owner's choice
tauanbinato
committed
2f64be8
Read Deno.test calls as test cases
tauanbinato
committed
1bb2540
Ask about unverified tokens, keys in code, turned-off escaping and plain-text passwords
tauanbinato
committed
736e0ce
Settle token, password and logging checks with Choices that name what the code does
tauanbinato
committed
74fde0d
Make a value that needs a name but is written once in its file a note
tauanbinato
committed
96fc46e
Ask whether a definer function reaches other users' stored files, not only rows
tauanbinato
committed
ad2c4b4
Name Python GraphQL server code as such, so resolver arguments read as client input
tauanbinato
committed
8ddb2ef
Lower security findings at test paths and tell reading a token's claims from trusting it
tauanbinato
committed
c02edbd
Make tiny instruction sections notes, ask where error text goes for reviews too, and keep only turned-off token checks at review
tauanbinato
committed
4923612
Make a value that only needs a name at most a consider
tauanbinato
committed
fdb1515
Name a program's own screens as local in the error-text destination Choice
tauanbinato
committed
1831a66
Leave copies in retired directories out of shared logic
tauanbinato
committed
3ffa0bc
Keep a weak setting at review only when the function itself shows it
tauanbinato
committed
8ce49fd
Record this audit's changes in the changelog and the site's how-it-works page
tauanbinato
committed
f295b66
Correct the changelog's count of findings in intentionally vulnerable apps
tauanbinato
committed
8ce2b0c
Name desktop, game and terminal programs as client applications
tauanbinato
committed
7e13b86
Check Claude Code skills and commands as project documentation
tauanbinato
committed
e09de35
Record the final corpus numbers in the changelog
tauanbinato
committed
553674d
Parse project template files without their Jinja tags
tauanbinato
committed
6a37f95
Put a unit's level caps in one function and share the unsafe-settings test setup
tauanbinato
committed
e8195ad
Keep the settle Choices of security units in a module of their own
tauanbinato
committed
ee2bfed
Read a file of one kind of code per feature as one job, and flatten matching_windows
tauanbinato
committed
086d0ef
Ask a large document's split finding what kind of document it is
tauanbinato
committed
97f2b89
Keep follow-up requests as JSON text until they are asked
tauanbinato
committed
5179fe4
Let a comment's leaning kind decide what its questions leave open
tauanbinato
committed
dda0e69
Ask what a test's assertions read before calling them internal details
tauanbinato
committed
ac8a727
Record the corpus numbers after the follow-up changes
tauanbinato
committed
0cd7b91
Look an instruction file up by its exact name
tauanbinato
committed
ffa26ce
Read an instruction file's link target when no harness names it
tauanbinato
committed
d2bb7e8
Read go.mod as a package manifest
tauanbinato
committed
820d734
Give the instruction probe and Go requirements functions of their own, and share the linked-file test
tauanbinato
committed
18662f5
Judge server templates: inline scripts, template code and Node views
tauanbinato
committed
1bc2cbf
Give the choice of grammar and parsed text its own function
tauanbinato
committed
a480d13
Tell Pug's unescaped output from a comparison, and name templates in check's help
tauanbinato
committed
51a26ac
Check Pug's next character with starts_with, as newer clippy asks
tauanbinato
committed
714e7a2