issues Search Results · language:Edge language:Python language:PHP language:JavaScript linked:pr language:JavaScript
Filter by
4.8M results
Parent Algora bounty: #743
Bug
reviewController.postReview passes req.body directly to createReview() with no input validation. There is no
validators/review.js file. Required fields (targetUserId, jobId, ...
jojosenthusiast
Parent Algora bounty: #743
Bug
searchController.search reads the query string as req.query.q ?? . Express parses ?q=a q=b as an array, so req.query.q
can be a string[] instead of a string. Passing an ...
Parent Algora bounty: #743
Bug
notificationService.createNotification(payload) constructs the notification as { id, read: false, ...payload }. Because
...payload is spread AFTER read: false, a caller ...
Problem
PR #3431 added the stale-file sweep to scripts/install-loom.sh (lines 1097–1140): compares previous
install-metadata.json installed_files against the new defaults set and git rms orphaned files. ...
loom:building
rjwalters
Problem
loom-tools/src/loom_tools/claim.py lines 133-156 contain _is_claim_abandoned() which only handles claims whose agent_id
starts with shepherd- and checks for shepherd progress files at .loom/progress/shepherd-{task_id}.json. ...
loom:building
Parent Algora bounty: #743
Bug
uploadController.uploadFile checks req.file only after the response is already being built. When multer finds no file in
the request, the controller still returns HTTP ...
Problem
loom-tools/src/loom_tools/validate_phase.py lines 502 and 508 emit user-facing recovery guidance that references
.loom/scripts/loom-shepherd.sh {issue} --merge — a script deleted in Phase 3.3 ...
loom:building
Parent Algora bounty: #743
Bug
The GET /health handler in app.js calls res.status(200).json({ ok: true, service: api }) directly instead of using the
project s shared ok() response helper. Every other ...
Parent Algora bounty: #743
Bug
authMiddleware checks authHeader?.startsWith( Bearer ). HTTP authentication schemes are case-insensitive per RFC 7235,
so tokens sent as authorization: bearer token or ...
Parent Algora bounty: #743
Bug
reviewRoutes.js mounts GET /api/reviews and POST /api/reviews without importing or applying authMiddleware. Any
unauthenticated request can list all reviews or create a ...
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.