Search results

Security: Sanitize IRC outbound messages to prevent injection

Status: Open.

#3118 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: Validate module names against registry instead of dynamic resolution

Status: Open.

#3117 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: Add rate limiting and computational throttles to bot commands

Status: Open.

#3116 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: Harden regex parsing for IRC dice command detection

Status: Open.

#3115 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: Replace broad Error catching with explicit exception handling

Status: Open.

#3114 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: Add strict input size and command complexity limits to bot parser

Status: Open.

#3113 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: Replace dynamic command class instantiation with allowlist registry

Status: Open.

#3112 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: add rate limiting to sensitive API endpoints

Status: Open.

#3111 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: Slack /roll endpoint should verify signed requests and replay protection

Status: Open.

#3110 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: custom JSON patch implementation should be hardened or replaced

Status: Open.

#3109 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: users.index API may expose unnecessary user data

Status: Open.

#3108 In omnicolor/commlink;

· omnicolor opened on May 12, 2026

Security: API token creation endpoint may allow unauthorized token minting

Status: Open.

#3107 In omnicolor/commlink;

· omnicolor opened on May 12, 2026