summaryrefslogtreecommitdiff
path: root/services/worker/internal/webhook/webhook.go
diff options
context:
space:
mode:
authorFuwn <[email protected]>2026-02-07 05:41:07 -0800
committerFuwn <[email protected]>2026-02-07 05:41:07 -0800
commita1a405e56a0907ed44bfaba721e0ea632e051141 (patch)
tree99621f7c1407eed732eeb5742fc7458c14ee6d48 /services/worker/internal/webhook/webhook.go
parentsecurity: remove unsafe-eval CSP, fix host header injection, harden API routes (diff)
downloadasa.news-a1a405e56a0907ed44bfaba721e0ea632e051141.tar.xz
asa.news-a1a405e56a0907ed44bfaba721e0ea632e051141.zip
fix: resolve 6 pre-ship audit bugs
- Webhook entry identifier: use entry GUID instead of feed identifier - Optimistic rollback: add previousTimeline snapshot and onError handler to both useToggleEntryReadState and useToggleEntrySavedState - Rate limiter memory leak: delete Map entries when window expires, use else-if to avoid re-setting after delete - Entries API limit param: use Number.isFinite guard instead of falsy coercion that treats 0 as default - PWA manifest: add PNG raster icon routes (192x192, 512x512) for devices that don't support SVG icons - Billing webhook: throw on DB errors and return 500 so Stripe retries failed events instead of silently losing them
Diffstat (limited to 'services/worker/internal/webhook/webhook.go')
-rw-r--r--services/worker/internal/webhook/webhook.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/services/worker/internal/webhook/webhook.go b/services/worker/internal/webhook/webhook.go
index cf063b9..1a9bccd 100644
--- a/services/worker/internal/webhook/webhook.go
+++ b/services/worker/internal/webhook/webhook.go
@@ -92,7 +92,7 @@ func (webhookDispatcher *Dispatcher) DispatchForFeed(
}
entryPayloads = append(entryPayloads, EntryPayload{
- EntryIdentifier: entry.FeedIdentifier,
+ EntryIdentifier: entry.GUID,
FeedIdentifier: entry.FeedIdentifier,
GUID: entry.GUID,
URL: entry.URL,