admin/felhom.eu
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Evidence: redact a dead session token of a throwaway Actual (the app was removed by the walk). Docs only.
gates / gates (push) Successful in 1m59s
Details

Browse Source
This commit is contained in:
admin committed 2026-11-03 00:30:42 +01:00
1 parent d02c0c2cd8
commit 03a71b68e6
2 files changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

documentation/audits/security-2026-11-02/walks/actualbudget/box-verdict-actualbudget.json
+1 -1
View File
@@ -207,7 +207,7 @@
"23:41:24 [1] deployed, controller state=running, pinned={'actualbudget': 'actualbudget/actual-server:26.9.0'}",
"23:41:24 gate: budget is gated — passed as the household (cookie set)",
"23:41:28 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"23:41:28 actualbudget: /account/bootstrap http=200 :: {\"status\":\"ok\",\"data\":{\"token\":\"04b22639-d5f9-48bc-a93b-c61688fcefca\"}}",
"23:41:28 actualbudget: /account/bootstrap http=200 :: {\"status\":\"ok\",\"data\":{\"token\":\"***REDACTED***\"}}",
"23:41:28 actualbudget: login with the seeded password http=200 ok=True",
"23:41:30 [5] drill commit b6efe8acd65a: actualbudget actualbudget/actual-server:26.9.0 -> actualbudget/actual-server:26.11.0 (push rc=0)",
"23:41:39 [5] the box's drill mirror now at b6efe8acd",
documentation/audits/security-2026-11-02/walks/actualbudget/walk.txt
+1 -1
View File
@@ -3,7 +3,7 @@
23:41:24 [1] deployed, controller state=running, pinned={'actualbudget': 'actualbudget/actual-server:26.9.0'}
23:41:24 gate: budget is gated — passed as the household (cookie set)
23:41:28 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}
23:41:28 actualbudget: /account/bootstrap http=200 :: {"status":"ok","data":{"token":"04b22639-d5f9-48bc-a93b-c61688fcefca"}}
23:41:28 actualbudget: /account/bootstrap http=200 :: {"status":"ok","data":{"token":"***REDACTED***"}}
23:41:28 actualbudget: login with the seeded password http=200 ok=True
23:41:30 [5] drill commit b6efe8acd65a: actualbudget actualbudget/actual-server:26.9.0 -> actualbudget/actual-server:26.11.0 (push rc=0)
23:41:39 [5] the box's drill mirror now at b6efe8acd