issues Search Results · language:Dune language:JavaScript language:JavaScript linked:pr language:JavaScript language:Java
Filter by
3.2M results
Problem Statement
The test suite in tests/security/ covers DOM XSS patterns, markdown sanitization, and key storage, but has no tests for
the error-handling branches in freeforge/src/api.js. HTTP 401, ...
bug
JackSmack1971
事象
dev 動作確認(S-08 ユーザー管理)で、メンバー削除の確認ダイアログが ブラウザ標準の window.confirm() で表示される。アプリの Bootstrap ベース UI と見た目が不統一で、SaaS
製品としての体験上気になる、との指摘(2026-06-28)。
該当
- web/js/tenant-users.js の削除ボタン: if (!window.confirm(...))。 ...
area/frontend
enhancement
priority/p3
task-type:impl
win2cot
Problem Statement
The Content-Security-Policy header in netlify.toml contains no report-uri or report-to directive, and there is no
Content-Security-Policy-Report-Only header. CSP violations (including ...
bug
Problem Statement
validateAndConnect in freeforge/src/features/onboarding.js and updateKey in freeforge/src/features/settings.js perform
only an empty-string check before making a network call to validate ...
enhancement
When watching a game with 4 players, if you use the 3D settings, the names of the players aren #39;t spaced evenly and
can overlap. Also, when you click on one of these users, the way it move the camera ...
web-report
jacob-sabella
Problem Statement
freeforge/src/app.js assigns the internal error log reader to a global window property (window.__freeforgeGetErrorLog =
getErrorLog). Any same-origin JavaScript — including browser extensions ...
bug
Problem Statement
The [[headers]] block in netlify.toml does not include a Strict-Transport-Security (HSTS) header. Without HSTS, browsers
do not cache HTTPS-only enforcement for this origin, leaving ...
bug
Summary
Fans opening a public team that only has website access are sent into the app s member-focused team route, where they
see private/member CTAs like Chat and Parent actions instead of the expected ...
fix-ready
triage:bug
triaged
snidedog[bot]
Problem Statement
The command palette (freeforge/src/features/palette.js) renders list items with role= option inside a role= listbox
container but never sets aria-selected on any item. ARIA 1.2 requires ...
bug
Problem Statement
fetchFreeModels in freeforge/src/api.js makes a bare fetch() call with no AbortController, no signal, and no timeout. If
the OpenRouter /models endpoint is slow or non-responsive, the ...
bug
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.