Kyle Isom
ea9375b6ae
CRITICAL: - A-001: SQL injection in snapshot — escape single quotes in backup path - A-002: Timing attack — always verify against dummy hash when user not found, preventing username enumeration - A-003: Notebook ownership — all authenticated endpoints now verify user_id before loading notebook data - A-004: Point data bounds — decodePoints returns error on misaligned data, >4MB payloads, and NaN/Inf values HIGH: - A-005: Error messages — generic errors in HTTP responses, no err.Error() - A-006: Share link authz — RevokeShareLink verifies notebook ownership - A-007: Scan errors — return 500 instead of silently continuing MEDIUM: - A-008: Web server TLS — optional TLS support (HTTPS when configured) - A-009: Input validation — page_size, stroke count, point_data alignment checked in SyncNotebook RPC - A-010: Graceful shutdown — 30s drain on SIGINT/SIGTERM, all servers shut down properly Added AUDIT.md with all 17 findings, status, and rationale for accepted risks. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
eng-pad-server
Read-only sync and web viewer for eng-pad engineering notebooks.
The Android app pushes complete notebooks to this server via gRPC. The server stores them and serves read-only views through a web UI with SVG rendering. Shareable links allow unauthenticated access to specific notebooks.
Features
- gRPC sync: receive notebook data from the Android app over TLS
- Web viewer: browse notebooks, view pages as SVG, export JPG/PDF
- Authentication: password (Argon2id) + FIDO2/U2F security keys
- Shareable links: token-based URLs with optional expiry
Quick Start
# Build
make eng-pad-server
# Generate example config
cp eng-pad-server.toml.example /srv/eng-pad-server/eng-pad-server.toml
# Edit configuration (TLS certs, database path, etc.)
# Initialize (creates database, prompts for admin user)
./eng-pad-server init
# Run
./eng-pad-server server
Build
make all # vet → lint → test → build
make test # run tests
make lint # golangci-lint
make proto # regenerate gRPC code from .proto files
make proto-lint # buf lint + breaking change detection
Documentation
- ARCHITECTURE.md — full system specification
- CLAUDE.md — AI development context
License
Private. All rights reserved.