issues Search Results · language:Dune language:JavaScript language:JavaScript language:TypeScript language:CSS
Filter by
36.6M results
Severity: P1 (XSS defense-in-depth)
next.config.js:43 sets script-src self unsafe-inline … and there is no middleware.js, so the nonce-based script-src is
the documented next step comment is an unimplemented ...
Bug Description:
In the browser application, the file dialog (e.g. Open… , Open Workspace from File… ) lets you switch the location bar
to a text input and type a path. The first time you do this it navigates ...
bug
file dialog
filesystem
Description
The disputes table is fully defined in backend/src/db/schema.ts and backend/src/routes/disputes.routes.ts exists, but
the route handlers and service logic are missing. Implement the full CRUD ...
difficulty: medium
Summary
Adopt Architecture Decision Records (ADRs) as a lightweight process for significant, multi-component changes, as
proposed and agreed in discussion #271.
The idea (from @RafPe): before dropping ...
documentation
enhancement
Severity: P1 (dependency vuln)
npm audit (verified live): 5 moderate, 0 high, 0 critical — all one root cause: postcss 8.4.31 ( 8.5.10, XSS via
unescaped /style) bundled inside next@16.2.9, cascading ...
Dois problemas pré-existentes descobertos durante o trabalho de robustez mobile/offline (não corrigidos no PR para não
alterar checksums de migrations já aplicadas em produção)
- Alternating colors not working in empty space
- Drag missing background color
- Removing a machine preference seems to set it in the selector
Severity: P1 (grading manipulation)
lib/abuseDetection.js:21-41 is ~12 hard-coded English regexes with no case/whitespace/leet folding (unlike
lib/contentSafety.js). It s the only runtime countermeasure ...

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.