Task view update probe omits the required source ETag #1057

Open
opened 2026-10-04 13:54:46 +00:00 by kayg · 0 comments
Owner

Found in merge round 7b, issue #867, head a1f3a0797.

The Task view update probe reports PUT statuses [428]. tests/adversarial/attack2.py:3189 sends no If-Match header. crates/plugins/notes/src/task_views.rs:182 documents a required strong source ETag; line 202 calls match_etag before it writes. The same route documents 428 for a missing precondition. The route is new after production c39ffe5d9.

Expected: keep the server precondition that prevents lost edits. Align the probe with the published contract. Do not accept all 428 responses as proof that updates work. Use a bounded regression test to check valid, missing and stale preconditions and the final saved view.

No product defect or data loss is shown by this retained finding. The current probe cannot check the intended update behavior. This job did not run or modify its stress workflow.

Found in merge round 7b, issue #867, head a1f3a0797. The Task view update probe reports PUT statuses [428]. tests/adversarial/attack2.py:3189 sends no If-Match header. crates/plugins/notes/src/task_views.rs:182 documents a required strong source ETag; line 202 calls match_etag before it writes. The same route documents 428 for a missing precondition. The route is new after production c39ffe5d9. Expected: keep the server precondition that prevents lost edits. Align the probe with the published contract. Do not accept all 428 responses as proof that updates work. Use a bounded regression test to check valid, missing and stale preconditions and the final saved view. No product defect or data loss is shown by this retained finding. The current probe cannot check the intended update behavior. This job did not run or modify its stress workflow.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal#1057
No description provided.