Full-project review + fixes: fail-open security, quiche driver OOM/stall, TUIC lifecycle leaks, vacuous tests#53

Merged

Itsusinn merged 24 commits into

mainfrom

claude/beautiful-easley-2d7b2b

Jul 2, 2026

Commits on Jul 1, 2026

docs: add second-round full-project code review report
Itsusinn
committed
fix(wind-core): treat IPv4-mapped IPv6 as private in is_private_ip
Itsusinn
committed
fix(tuic-server): warn instead of silently defaulting unknown outbound type to direct
Itsusinn
committed
fix(tuic-server): warn on unparsable ACL CIDR instead of dropping silently
Itsusinn
committed
fix(tuic-server): require token boundary after ACL localhost/private keywords
Itsusinn
committed
fix(wind-dns): add container serde default so partial [dns] tables parse
Itsusinn
committed
fix(wind-dns): default DnsMode to System to match documented behaviour
Itsusinn
committed
fix(wind-acme): write TLS private keys with 0600 permissions on Unix
Itsusinn
committed

Commits on Jul 2, 2026