From 2783d949524b430154d7f3aca8d2d9b6b69e8130 Mon Sep 17 00:00:00 2001
From: Amy Gale Ruth Bowersox <amy@erbosoft.com>
Date: Wed, 5 Nov 2025 22:13:49 -0700
Subject: [PATCH] fix session manager concurrency error and error in HTML
 Checker doFlushNewlines

---
 htmlcheck/checker.go | 2 +-
 ui/session_mgr.go    | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/htmlcheck/checker.go b/htmlcheck/checker.go
index 158c57d..52dd9bc 100644
--- a/htmlcheck/checker.go
+++ b/htmlcheck/checker.go
@@ -420,7 +420,7 @@ func (ht *htmlCheckerImpl) doFlushWhitespace() {
 func (ht *htmlCheckerImpl) doFlushNewlines() {
 	// Measure the number of line breaks we have.
 	lineBreaks, crs := 0, 0
-	for ch := range []byte(ht.tempBuffer.String()) {
+	for _, ch := range []byte(ht.tempBuffer.String()) {
 		switch ch {
 		case '\r':
 			crs++
diff --git a/ui/session_mgr.go b/ui/session_mgr.go
index 5da2c02..29adf8c 100644
--- a/ui/session_mgr.go
+++ b/ui/session_mgr.go
@@ -229,24 +229,32 @@ func setSessionAnon(session *sessions.Session) {
 	}
 }
 
+var lastHitMutex sync.Mutex
+
 // AmSessionFirstTime initializes the session after it's first created.
 func AmSessionFirstTime(session *sessions.Session) {
+	lastHitMutex.Lock()
 	setSessionAnon(session)
 	session.Values["lasthit"] = time.Now()
+	lastHitMutex.Unlock()
 }
 
 // AmResetSession clears the specified session.
 func AmResetSession(session *sessions.Session) {
+	lastHitMutex.Lock()
 	for k := range session.Values {
 		delete(session.Values, k)
 	}
 	setSessionAnon(session)
 	session.Values["lasthit"] = time.Now()
+	lastHitMutex.Unlock()
 }
 
 // AmHitSession "hits" a session, updating its "last hit" time.
 func AmHitSession(session *sessions.Session) {
+	lastHitMutex.Lock()
 	session.Values["lasthit"] = time.Now()
+	lastHitMutex.Unlock()
 }
 
 /* AmSessions returns information about the currently active sessions.