in PTT mode the blur and focus handlers call callEmbed.control.setMicrophone(false) unconditionally, without checking pttActiveRef.current. The mic button is still available in PTT mode, so a user who deliberately unmutes (e.g. to talk hands-free for a minute) has their mic silently cut the next time the window loses or gains focus — including a click into the EC iframe, which fires window blur. Every focus change also sends a redundant io.element.device_mute over the widget transport.
How to trigger
enable PTT, join a call, click the mic button to unmute, then click into the call iframe or alt-tab and back — the mic mutes with no indication why.
Suggested fix
only release the mic in onBlur/onFocus when pttActiveRef.current is true (mirroring the unmount cleanup), and hide/disable the manual mic toggle in PTT mode if hands-free is not meant to be supported.
Filed from the September 2026 client audit (branch lotus @ 4bea4895).
**Severity:** medium · **Type:** bug · **Confidence:** high
**Location:** `src/app/features/call/CallControls.tsx:203-214`
### Problem
in PTT mode the `blur` and `focus` handlers call `callEmbed.control.setMicrophone(false)` unconditionally, without checking `pttActiveRef.current`. The mic button is still available in PTT mode, so a user who deliberately unmutes (e.g. to talk hands-free for a minute) has their mic silently cut the next time the window loses or gains focus — including a click into the EC iframe, which fires window `blur`. Every focus change also sends a redundant `io.element.device_mute` over the widget transport.
### How to trigger
enable PTT, join a call, click the mic button to unmute, then click into the call iframe or alt-tab and back — the mic mutes with no indication why.
### Suggested fix
only release the mic in `onBlur`/`onFocus` when `pttActiveRef.current` is true (mirroring the unmount cleanup), and hide/disable the manual mic toggle in PTT mode if hands-free is not meant to be supported.
---
_Filed from the September 2026 client audit (branch `lotus` @ 4bea4895)._
jared
added this to the Audit 2026-09 · Medium & Low milestone 2026-09-12 01:50:58 -04:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Severity: medium · Type: bug · Confidence: high
Location:
src/app/features/call/CallControls.tsx:203-214Problem
in PTT mode the
blurandfocushandlers callcallEmbed.control.setMicrophone(false)unconditionally, without checkingpttActiveRef.current. The mic button is still available in PTT mode, so a user who deliberately unmutes (e.g. to talk hands-free for a minute) has their mic silently cut the next time the window loses or gains focus — including a click into the EC iframe, which fires windowblur. Every focus change also sends a redundantio.element.device_muteover the widget transport.How to trigger
enable PTT, join a call, click the mic button to unmute, then click into the call iframe or alt-tab and back — the mic mutes with no indication why.
Suggested fix
only release the mic in
onBlur/onFocuswhenpttActiveRef.currentis true (mirroring the unmount cleanup), and hide/disable the manual mic toggle in PTT mode if hands-free is not meant to be supported.Filed from the September 2026 client audit (branch
lotus@4bea4895).