mixandClaude Opus 5.5 8b9798884a staticcheck: the four items of the audit (stage 0) ...

- handlers/authz.go: domainIDSet removed, nothing called it (U1000).
- handlers_outbound_pages_test.go: two refusals whose status code was
  assigned and never read (SA4006) now check it is 400 - a custom DMARC
  report mode without an address, export passwords that differ.
- view/pages_test.go: !strings.Contains for a missing box (S1003).
- Audit plan line ticked, roadmap 6/61. No CHANGELOG line: nothing an
  operator sees changes.

staticcheck ./... clean afterwards. Evidence on the test server: see the
previous commit (same tree run).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 13:55:12 +03:00

..

auth

panel-redesign: security review of 2.0 - sessions belong to a user by id

2026-10-10 03:04:02 +03:00

handlers

staticcheck: the four items of the audit (stage 0)

2026-10-14 13:55:12 +03:00

validate

panel-notifications: findings of the technical and security reviews

2026-10-12 17:00:01 +03:00

view

staticcheck: the four items of the audit (stage 0)

2026-10-14 13:55:12 +03:00

guard_routes_test.go

design: in-log and in-filter-lists leave the deferred screens

2026-10-11 23:50:33 +03:00

handlers_license_test.go

release: 1.1.0: Domain-admin role and internal/web package split

2026-09-22 15:24:52 +03:00

home_test.go

panel-redesign: paths follow the menu; Account and Server settings split

2026-10-09 21:51:55 +03:00

security_test.go

release: 0.5.0: Pre-1.0 security review, domain-admin role, doc consolidation

2026-09-22 15:24:51 +03:00

security.go

panel-redesign: paths follow the menu; Account and Server settings split

2026-10-09 21:51:55 +03:00

web.go

from-header-binding: the sender check, what it costs, its pages; guide, architecture, security

2026-10-12 19:35:43 +03:00