lekss361
  • Joined on 2026-05-15
lekss361 closed issue lekss361/gendesign#2234 2026-07-03 06:27:23 +00:00
[P2] admin.py: текст исключений утекает в HTTP-ответы (8 мест detail=f"...: {e}")
lekss361 pushed to main at lekss361/gendesign 2026-07-03 06:27:23 +00:00
5f6db8dbb7 Merge pull request 'fix(tradein/security): admin.py — generic detail + error-id вместо сырого текста исключений (#2234)' (#2261) from fix/tradein-admin-exception-leak into main
efa0bafa18 fix(tradein/security): 404 IMV-адрес — warning без traceback, не exception-шум (#2234)
c65a73ca9a fix(tradein/security): admin.py — generic detail + error-id вместо сырого текста исключений (#2234)
Compare 3 commits »
lekss361 deleted branch fix/tradein-admin-exception-leak from lekss361/gendesign 2026-07-03 06:27:23 +00:00
lekss361 created branch fix/tradein-extval-house-id in lekss361/gendesign 2026-07-03 06:22:56 +00:00
lekss361 pushed to fix/tradein-extval-house-id at lekss361/gendesign 2026-07-03 06:22:56 +00:00
291717fa2f fix(tradein/data): external_valuations.house_id — резолв в write-path + идемпотентный бэкфилл (#2236)
lekss361 created pull request lekss361/gendesign#2261 2026-07-03 06:22:08 +00:00
fix(tradein/security): admin.py — generic detail + error-id вместо сырого текста исключений (#2234)
lekss361 commented on issue lekss361/gendesign#2233 2026-07-03 06:21:46 +00:00
[P1] photo-upload буферизует всё тело в RAM до проверки лимита (OOM-риск при mem_limit 768m)

Задеплоено и проверено (2026-07-03 06:2x UTC).

  • PR #2258 смержен, deploy success (sha 910bfed5).
  • Смок: backend health 200; request_body { max_size 12MB }
lekss361 pushed to fix/tradein-admin-exception-leak at lekss361/gendesign 2026-07-03 06:20:55 +00:00
efa0bafa18 fix(tradein/security): 404 IMV-адрес — warning без traceback, не exception-шум (#2234)
lekss361 created branch fix/tradein-admin-exception-leak in lekss361/gendesign 2026-07-03 06:16:48 +00:00
lekss361 pushed to fix/tradein-admin-exception-leak at lekss361/gendesign 2026-07-03 06:16:48 +00:00
c65a73ca9a fix(tradein/security): admin.py — generic detail + error-id вместо сырого текста исключений (#2234)
lekss361 deleted branch fix/tradein-photo-upload-stream-cap from lekss361/gendesign 2026-07-03 06:16:00 +00:00
lekss361 pushed to main at lekss361/gendesign 2026-07-03 06:15:59 +00:00
910bfed5f1 Merge pull request 'fix(tradein/security): photo-upload — чанковое чтение с капом 10MB + Caddy request_body 12MB (#2233)' (#2258) from fix/tradein-photo-upload-stream-cap into main
edbdd28286 fix(tradein/security): photo-upload — чанковое чтение с капом 10MB + Caddy request_body 12MB (#2233)
Compare 2 commits »
lekss361 merged pull request lekss361/gendesign#2258 2026-07-03 06:15:58 +00:00
fix(tradein/security): photo-upload — чанковое чтение с капом 10MB + Caddy request_body 12MB (#2233)
lekss361 closed issue lekss361/gendesign#2233 2026-07-03 06:15:58 +00:00
[P1] photo-upload буферизует всё тело в RAM до проверки лимита (OOM-риск при mem_limit 768m)
lekss361 closed issue lekss361/gendesign#2209 2026-07-03 06:14:21 +00:00
[P1] Честность диапазона оценки: раскрыть/рекалибровать 56.6% + min-width floor + backtest baseline + CI-гейт
lekss361 commented on issue lekss361/gendesign#2209 2026-07-03 06:14:16 +00:00
[P1] Честность диапазона оценки: раскрыть/рекалибровать 56.6% + min-width floor + backtest baseline + CI-гейт

Закрываю: ядро acceptance выполнено, смержено и задеплоено; остаток вынесен в follow-up #2255.

По пунктам:

  • **Честно…
lekss361 created pull request lekss361/gendesign#2258 2026-07-03 06:10:54 +00:00
fix(tradein/security): photo-upload — чанковое чтение с капом 10MB + Caddy request_body 12MB (#2233)
lekss361 commented on issue lekss361/gendesign#2214 2026-07-03 06:07:55 +00:00
[P1] Observability: off-box uptime-probe + fail health-check на dead backend + mem-лимиты + log-rotation

Bot-часть выполнена и верифицирована на проде (2026-07-03 06:06 UTC), PR #2231 задеплоен.

Проверка docker inspect на проде —…

lekss361 created branch fix/tradein-photo-upload-stream-cap in lekss361/gendesign 2026-07-03 06:07:03 +00:00
lekss361 pushed to fix/tradein-photo-upload-stream-cap at lekss361/gendesign 2026-07-03 06:07:03 +00:00
edbdd28286 fix(tradein/security): photo-upload — чанковое чтение с капом 10MB + Caddy request_body 12MB (#2233)