Ilia Denisov 461e330bfc Admin Messages CSV: defuse spreadsheet formula injection ...

The sender name and message body are user-controlled; a leading =, +, -, @, tab or
CR in the CSV export would execute as a formula when a moderator opens it in a
spreadsheet. csvSafe() prefixes such values with a single quote. Unit-tested.

2026-06-08 22:09:26 +02:00

..

csvsafe_test.go

Admin Messages CSV: defuse spreadsheet formula injection

2026-06-08 22:09:26 +02:00

dto_test.go

Stage 17 round 6 (#10 backend): enforce chat only on your turn

2026-06-07 11:23:43 +02:00

dto.go

Stage 17 round 6 (#16/#17, PR C): lobby sort + server-derived in-game friend state

2026-06-08 19:23:48 +02:00

handlers_account.go

Stage 11: account linking & merge (email + Telegram Login Widget) (#12)

2026-06-04 09:18:17 +00:00

handlers_admin_console.go

Admin Messages CSV: defuse spreadsheet formula injection

2026-06-08 22:09:26 +02:00

handlers_auth.go

Stage 15: dual Telegram bots & language-gated variants

2026-06-05 09:35:53 +02:00

handlers_blocks.go

Stage 8: UI social/account/history surfaces

2026-06-03 19:47:40 +02:00

handlers_friends.go

Stage 17 round 6 (#16/#17, PR C): lobby sort + server-derived in-game friend state

2026-06-08 19:23:48 +02:00

handlers_game.go

Stage 17 round 6 (#4/#5/#6): draft persistence wire + gateway + UI

2026-06-07 22:25:29 +02:00

handlers_invitations.go

Stage 8: UI social/account/history surfaces

2026-06-03 19:47:40 +02:00

handlers_link.go

Stage 11: account linking & merge (email + Telegram Login Widget) (#12)

2026-06-04 09:18:17 +00:00

handlers_test.go

Stage 17 round 6 (#4/#5/#6): draft persistence wire + gateway + UI

2026-06-07 22:25:29 +02:00

handlers_user.go

Stage 17 round 5 — backend/correctness bug fixes

2026-06-07 09:17:35 +02:00

handlers.go

Stage 17 round 6 (#16/#17, PR C): lobby sort + server-derived in-game friend state

2026-06-08 19:23:48 +02:00

middleware_console_test.go

Stage 10: admin console & dictionary ops (complaint review, hot-reload, broadcasts) (#11)

2026-06-04 07:27:49 +00:00

middleware_test.go

Stage 1: backend foundation (Postgres, sessions, accounts, OTel)

2026-06-02 13:52:26 +02:00

middleware.go

Stage 10: admin console & dictionary ops (complaint review, hot-reload, broadcasts) (#11)

2026-06-04 07:27:49 +00:00

server_test.go

Stage 1: backend foundation (Postgres, sessions, accounts, OTel)

2026-06-02 13:52:26 +02:00

server.go

Stage 11: account linking & merge (email + Telegram Login Widget) (#12)

2026-06-04 09:18:17 +00:00