|
|
dc148dde69
|
Stop a bare nick from cancelling an account's help ticket
|
2026-07-19 17:45:04 +00:00 |
|
|
|
fa9eaece45
|
Cap and freeze-gate GroupServ registration
|
2026-07-19 17:45:04 +00:00 |
|
|
|
6149a15b34
|
Let identified users manage CERT without a password
CI / check (push) Successful in 4m18s
|
2026-07-19 17:17:36 +00:00 |
|
|
|
bfff7dba91
|
Silently ignore unknown in-channel fantasy commands
CI / check (push) Successful in 4m15s
|
2026-07-19 17:09:07 +00:00 |
|
|
|
68372042f8
|
Gate OperServ INFO note edits at admin and cap the MemoServ ignore list
CI / check (push) Successful in 4m17s
|
2026-07-19 16:21:31 +00:00 |
|
|
|
8f41fc9903
|
Freeze ChanServ MODE/ACCESS/FLAGS on suspended channels and make PEACE group-access-aware
|
2026-07-19 15:59:00 +00:00 |
|
|
|
03d39c1329
|
Guard the namespace on NickServ GROUP, gRPC GroupNick, and GroupServ REGISTER (confusable/forbid/cap)
CI / check (push) Has been cancelled
|
2026-07-19 15:34:35 +00:00 |
|
|
|
c36341668c
|
Fix self-review regressions: throttle SASL SCRAM, key game target by UID, exclude keycard from password lockout
CI / check (push) Has been cancelled
|
2026-07-19 14:38:16 +00:00 |
|
|
|
4599c4834d
|
Bind game identity to UID (hijack + cap bypass) and warn on plaintext gossip
CI / check (push) Successful in 4m17s
|
2026-07-19 14:15:06 +00:00 |
|
|
|
3648c48d2e
|
Rate-limit REPORT and REQUEST on the real host instead of the spoofable nick
|
2026-07-19 13:39:03 +00:00 |
|
|
|
b2ffc01e52
|
Bound dice batches, game count, and report/help queues, and harden community votekick
|
2026-07-19 13:34:48 +00:00 |
|
|
|
64c4bbeae4
|
Cap certfp, channel access, and akick lists to bound attacker-driven log growth
|
2026-07-19 13:27:50 +00:00 |
|
|
|
d833dc28f0
|
Fix duration overflow, expiry-warned resets, DICT control-char injection, and HostServ TAKE forbid recheck
|
2026-07-19 13:24:46 +00:00 |
|
|
|
68df1e7078
|
Use the ircd's learned CHANMODES arities for FMODE/FJOIN param scanning
|
2026-07-19 13:22:00 +00:00 |
|
|
|
7528b78bf7
|
Gate OperServ EXCEPTION at admin tier and reject match-all SNLINE regex
|
2026-07-19 13:17:54 +00:00 |
|
|
|
e7f012726c
|
Stop a non-founder from granting the founder flag (channel takeover escalation)
|
2026-07-19 13:12:54 +00:00 |
|
|
|
660362a34b
|
Throttle every password-verify path (GROUP/GHOST/CERT/DROP/SASL) and key the lockout by resolved account
|
2026-07-19 13:06:50 +00:00 |
|
|
|
1ecb76affb
|
Report failed IDENTIFY against a password-less account to the auth feed
CI / check (push) Successful in 4m10s
|
2026-07-19 05:00:12 +00:00 |
|
|
|
af5896743d
|
Restore the real ident when a HostServ ident@host vhost is turned off or deleted
|
2026-07-19 04:49:31 +00:00 |
|
|
|
384f222a22
|
Enforce cloned akicks with a standing +b for ircd-enforced masks
|
2026-07-19 04:49:31 +00:00 |
|
|
|
b38cde945f
|
Persist CS TOPIC so KEEPTOPIC and TOPICLOCK keep the set topic
CI / check (push) Successful in 4m13s
|
2026-07-19 04:21:25 +00:00 |
|
|
|
fc214ab0d3
|
Add three-tier services operator model (operator, administrator, root)
CI / check (push) Successful in 4m22s
|
2026-07-19 02:19:51 +00:00 |
|
|
|
0d16240606
|
nickserv/chanserv: announce a blocked look-alike registration to the staff feed (ServiceCtx alert drained by dispatch)
CI / check (push) Successful in 3m44s
|
2026-07-19 00:24:27 +00:00 |
|
|
|
89ac01d0b0
|
nickserv/chanserv: catch styled/fullwidth look-alike names too, and add a [register] confusable_check toggle (REHASH-reloadable)
CI / check (push) Successful in 3m48s
|
2026-07-19 00:15:08 +00:00 |
|
|
|
c2b70f5004
|
nickserv/chanserv: reject look-alike / mixed-script registration names (homoglyph impersonation guard)
CI / check (push) Successful in 3m56s
|
2026-07-19 00:02:44 +00:00 |
|
|
|
623750e638
|
dictserv: opt-in DICT (RFC 2229) lookup service — bots and /msg answer dict/define/thes/acronym/law/etc via dict.org off-reactor
CI / check (push) Successful in 4m4s
|
2026-07-18 20:21:30 +00:00 |
|
|
|
e05c62c085
|
operserv: NOTIFY gains k/m/u/o flags and quit/part reasons; protocol carries kicker, mode-setter, oper-up, user modes
CI / check (push) Successful in 4m1s
|
2026-07-18 19:18:17 +00:00 |
|
|
|
bbdb34aa77
|
operserv: NOTIFY allows broad masks (it only observes) so a #* watch can match all joins
CI / check (push) Successful in 4m4s
|
2026-07-18 17:14:13 +00:00 |
|
|
|
1d30c9cfe3
|
operserv: note the log channel and notify exclude list are REHASH-reloadable in HELP
CI / check (push) Successful in 4m11s
|
2026-07-18 17:02:01 +00:00 |
|
|
|
c415117ec5
|
operserv: add NOTIFY oper watch list emitting matched-user events to the staff feed
|
2026-07-18 16:16:06 +00:00 |
|
|
|
6429b82fc4
|
nickserv: SET SNOTICE — opt-in server-notice-style service replies (*** NickServ: ...) sourced from the server instead of the pseudoclient
CI / check (push) Successful in 3m47s
|
2026-07-18 03:40:22 +00:00 |
|
|
|
3230cdd9db
|
protocol: handle SQUERY like PRIVMSG so the NS/CS/OS/... service aliases work (proto 1206 delivers SQUERY raw instead of folding it to PRIVMSG)
CI / check (push) Successful in 3m43s
|
2026-07-18 03:24:58 +00:00 |
|
|
|
c64c3820a7
|
protocol: verify echos pseudoclients request servprotect (+k, by name from CAPAB USERMODES) so they cannot be killed by operators; warn if service_modes lacks it
CI / check (push) Successful in 3m45s
|
2026-07-18 02:41:03 +00:00 |
|
|
|
2f70b0c133
|
protocol: verify echo ircd module dependencies from CAPAB MODULES at link, warning per-feature if one is missing rather than failing silently
CI / check (push) Successful in 3m49s
|
2026-07-18 02:22:43 +00:00 |
|
|
|
0ca06247f8
|
protocol: read CASEMAPPING from CAPAB and verify it matches echos ascii identity folding, warning on mismatch instead of silently desyncing
CI / check (push) Successful in 4m31s
|
2026-07-18 01:58:49 +00:00 |
|
|
|
e206f4edbb
|
operserv: REDACT deletes a message by its msgid (draft/message-redaction), relayed server-sourced so no ircd oper privilege is needed
CI / check (push) Successful in 4m6s
|
2026-07-18 01:23:37 +00:00 |
|
|
|
e6f05a3ede
|
protocol: learn channel-mode arity + prefix modes (incl custom Y/ojoin) from CAPAB CHANMODES; services MODE uses the authoritative set
|
2026-07-18 01:15:23 +00:00 |
|
|
|
d313ca3523
|
chanserv: LEVELS grants a capability (op/topic/invite/access) to an access tier and above, additive so it never locks anyone out
|
2026-07-18 01:05:58 +00:00 |
|
|
|
0c3e09ea00
|
operserv: SPAMFILTER — persisted content filters pushed to the ircd m_filter via metadata, re-asserted at burst
CI / check (push) Successful in 3m56s
|
2026-07-18 00:04:24 +00:00 |
|
|
|
9908548978
|
chanserv: reuse echo_api chanmode_takes_param in the MODE extban gate instead of a less-complete local copy
|
2026-07-17 22:52:31 +00:00 |
|
|
|
8c77016aed
|
helpserv: HELP EXTBANS lists the network live extban set with a friendly example for each
|
2026-07-17 22:23:54 +00:00 |
|
|
|
77d09c4bdc
|
akick: accept a matching extban only the ircd knows (ircd-enforced +b), reject acting extbans with a clear reason
|
2026-07-17 22:01:32 +00:00 |
|
|
|
c990eb1e1e
|
extban: learn the ircd live set from CAPAB EXTBANS and validate AKICK/MODE against what it actually offers
|
2026-07-17 21:47:02 +00:00 |
|
|
|
da94142bad
|
chanserv: hold MODE ban/except/invex extbans to the [extban] enabled policy, matching AKICK
|
2026-07-17 21:33:00 +00:00 |
|
|
|
74a983467c
|
akick: match the server and fingerprint extbans from the SERVER name and ssl_cert metadata the s2s stream carries
|
2026-07-17 21:23:25 +00:00 |
|
|
|
f7c38cedad
|
chanserv: full AKICK extban registry, [extban] enabled gate, passive extbans pushed as channel bans for the ircd to enforce
|
2026-07-17 21:06:14 +00:00 |
|
|
|
426fc694a2
|
akick: match extbans (account/realname/realmask/unauthed) using the ident, real host and real name the UID carries but was discarding
CI / check (push) Successful in 4m0s
|
2026-07-17 19:47:34 +00:00 |
|
|
|
bc4fada354
|
api: type GroupServ flags (GroupFlag/GroupFlags via a shared flag_set! macro); delete the stringly apply_flags
CI / check (push) Successful in 4m0s
|
2026-07-17 18:47:08 +00:00 |
|
|
|
2a12ebd6e3
|
api: typed Flag/Flags bitset for channel access (mirrors Privs); level_caps resolves every level through it, collapsing 40 lines to 5
CI / check (push) Successful in 4m0s
|
2026-07-17 18:30:45 +00:00 |
|
|
|
65323caaeb
|
chanserv: FLAGS maps sop/halfop presets to flag letters (oa=+ao), fixing privilege escalation when editing a HOP/SOP entry
CI / check (push) Successful in 4m2s
|
2026-07-17 18:14:58 +00:00 |
|