Kelsidavis-WoWee/src
Kelsi e2383725f0 security: path traversal rejection, packet length validation; code quality
Security:
- Asset loader rejects paths containing ".." sequences (path traversal)
- Chat message parser validates length against remaining packet bytes
  before resize(), preventing memory exhaustion from malformed packets

Code quality:
- Extract 11 named geoset constants (kGeosetBareForearms, kGeosetWithCape,
  etc.) replacing ~40 magic number sites across 4 code paths
- Add build-debug/ and .claude/ to .gitignore
- Remove .claude/scheduled_tasks.lock from tracking
2026-03-27 18:42:48 -07:00
..
addons refactor: remove remaining shadowed arrays in lua_engine, constexpr batch 2026-03-27 15:27:47 -07:00
audio refactor: promote static const arrays to constexpr across audio/core/rendering 2026-03-27 15:31:21 -07:00
auth refactor: remaining C-style casts, color constants, and header guard cleanup 2026-03-25 11:57:22 -07:00
core security: path traversal rejection, packet length validation; code quality 2026-03-27 18:42:48 -07:00
game security: path traversal rejection, packet length validation; code quality 2026-03-27 18:42:48 -07:00
network fix: mail money uint64, other-player cape textures, zone toast dedup, TCP_NODELAY 2026-03-27 17:20:31 -07:00
pipeline security: path traversal rejection, packet length validation; code quality 2026-03-27 18:42:48 -07:00
rendering perf: eliminate per-frame heap allocs in M2 renderer; UI polish and report 2026-03-27 18:21:47 -07:00
ui perf: eliminate per-frame heap allocs in M2 renderer; UI polish and report 2026-03-27 18:21:47 -07:00
main.cpp log falling 2026-03-22 21:40:16 +03:00