Yogesh OjhaandClaude Opus 5 47e1c1663e fix(scans): NUL reaches the inventories too, and the guard has to catch it ...

The fieldmap scrubber covers every tool record that maps through it, which is not
how endpoints and ports are written: a sitemap entry, an archive record and a
service banner go straight from a provider dataclass into a row. gov.np's URL
discovery lost its whole run to one of them.

Both inventory row builders now scrub, at the same single-writer choke point the
fieldmap uses for tools. `endpoint_inventory._changes` scrubs too — the update path
writes the same untrusted text as the insert.

The savepoint guards added for exactly this caught nothing, because psycopg raises
the NUL complaint while *binding parameters*: SQLAlchemy wraps that above DBAPIError,
so `except DatabaseError` never fired. Both guards catch StatementError now.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DPueZXQMbjLXMokXeA8LFP

2026-09-06 07:48:59 +05:30

..

definitions

fix(endpoints): a long path segment no longer fails URL discovery

2026-09-06 06:22:48 +05:30

enums

feat(worker): a stage that comes up short reports partial

2026-09-05 18:37:55 +05:30

models

fix(endpoints): a long path segment no longer fails URL discovery

2026-09-06 06:22:48 +05:30

schemas

Refactor validation and DNS tools, implementation of onboarding wizard

2026-06-21 21:56:20 +05:30

services

fix(scans): NUL reaches the inventories too, and the guard has to catch it

2026-09-06 07:48:59 +05:30

utils

fix(scans): one NUL byte in a response no longer costs a 66-minute stage

2026-09-06 03:59:33 +05:30

.gitignore

cleanup precommit hooks

2026-01-26 15:02:53 +05:30

config.py

feat: add target enrichment, vhost discovery, and WAF detection stages

2026-09-02 10:18:03 +05:30

http.py

Refactor validation and DNS tools, implementation of onboarding wizard

2026-06-21 21:56:20 +05:30

logging.py

Add vuln nuclei module

2026-09-04 18:57:42 +05:30

pyproject.toml

feat(scan): name and describe the long tail of ports, with brand marks

2026-09-04 02:59:14 +05:30

sse.py

Refactor validation and DNS tools, implementation of onboarding wizard

2026-06-21 21:56:20 +05:30

uv.lock

Implement WHOIS service with RDAP provider integration

2026-02-07 10:43:08 +05:30