wt/mongoose
1
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-10-12 10:13:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

update prompt

Browse Source
This commit is contained in:
robert
2026-06-04 03:37:33 -04:00
parent 03afe3aeb1
commit d2d1cf5f17
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/specs/claude-security-scan.md
+1
View File
@@ -481,6 +481,7 @@ PRECEDENTS - Mongoose-specific filtering decisions:
28. Keep availability findings when one malformed packet, request, certificate, DNS response, MQTT message, WebSocket frame, or small sequence can reliably crash, wedge, corrupt, or disrupt a Mongoose target.
29. Keep custom backend findings only when the issue is in Mongoose’s backend interface, default backend, documented backend contract, or common backend implementation.
30. When uncertain, keep findings with clear external input, reachable code path, and concrete impact in Mongoose library/protocol/driver code; filter internal-access, impossible-state, local-misuse, generic-hardening, and speculative reports.
31. For dashboard reports, do not infer unauthenticated access from a route-specific check alone; account for the broader authentication flow. Keep concrete reachable bugs such as path traversal, unsafe decoded paths, or file read/write/delete issues.
## DIRECTORY AND FILE EXCLUSIONS