Skip to content

fix: J10 paper-cuts — upload cap, setup slash, shebang, copy, auth guard, error swap - #69

Merged
Chris Ball (ball42) merged 6 commits into
developfrom
fix/j10-papercuts
Jul 11, 2026
Merged

fix: J10 paper-cuts — upload cap, setup slash, shebang, copy, auth guard, error swap#69
Chris Ball (ball42) merged 6 commits into
developfrom
fix/j10-papercuts

Conversation

@ball42

Copy link
Copy Markdown
Collaborator

The J10 paper-cuts batch (internal ref J10) — six small, individually-reviewed fixes. Full suite green (102 passed), ruff clean.

Fixes

  • Upload size cap (16 MB) — Flask MAX_CONTENT_LENGTH + client_max_body_size 16m in JAWA's nginx vhost (both installer server blocks). Fixes the opaque failure when uploads hit nginx's silent 1 MB default. ⚠️ installer change — needs a manual fresh-VM install test before this reaches main (main is production for bin/installer.sh).
  • /setup trailing-slash stripaddress/jss-lock/alternate are stripped before saving, so Jamf webhook URLs no longer get double slashes.
  • Shebang validation — script uploads without a #! are rejected at upload with a friendly error, instead of failing cryptically at trigger time (the receiver execs the file directly).
  • Setup button copy — reads "Save" when editing an existing config, "Setup" on first-time setup.
  • Auth regression guard — a test locking in that login fails against a URL that doesn't answer like Jamf Pro (guards the old 3.0.2 "any creds" report).
  • /error route — no longer swaps the title and message when rendering the branded error page.

Notes

  • Known follow-up logged: no branded 413 page yet (oversized uploads get Flask's default 413 — functionally correct, UX follow-up).
  • Targets develop for the batched v3.2 release.

The error() view passed render_template kwargs crossed
(error_message=error_title, error=error_message), so the branded page
showed the title as the body and the message as the h1. Now aligned
with how error.html and _error_page use them: error = title, error_message
= body. Test asserts each lands in its correct element (has teeth: fails
if the swap returns).
@ball42
Chris Ball (ball42) merged commit 7f0f5f8 into develop Jul 11, 2026
2 checks passed
@ball42
Chris Ball (ball42) deleted the fix/j10-papercuts branch July 11, 2026 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant