Client audit 2026-09 — tracking index

#89 by jared was closed 2026-10-25 19:25:54 -04:00

0 / 94

Go to issue

Labels Milestones New Issue

0 Open 115 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

a11y

area: appearance

area: auth-session

area: build-ci

area: calls

area: desktop

area: media

area: messaging

area: mobile

area: moderation

area: navigation

area: notifications

area: settings

area: threads

bug

dependencies

docs

duplicate

enhancement

help wanted

invalid

needs-human-review

performance

planning

priority: critical

priority: high

priority: low

priority: medium

qa

question

research

security

tech-debt

ux

wontfix

Milestone

All milestones No milestones

Open milestones

Manual QA backlog Audit 2026-09 · P0 security & data loss Audit 2026-09 · High Audit 2026-09 · Medium & Low Features 2026-Q4

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

cole (Cole Keller) jared (Jared Vititoe) nathan (Nathan Vititoe)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 115 Closed

Label

Clear labels

a11y

area: appearance

area: auth-session

area: build-ci

area: calls

area: desktop

area: media

area: messaging

area: mobile

area: moderation

area: navigation

area: notifications

area: settings

area: threads

bug

dependencies

docs

duplicate

enhancement

help wanted

invalid

needs-human-review

performance

planning

priority: critical

priority: high

priority: low

priority: medium

qa

question

research

security

tech-debt

ux

wontfix

Milestone

No milestone

Open milestones

Manual QA backlog

Audit 2026-09 · P0 security & data loss

Audit 2026-09 · High

Audit 2026-09 · Medium & Low

Features 2026-Q4

Projects

Clear projects

Assignee

Clear assignees

cole

jared

nathan

Logout's search-index wipe can report success while another tab still holds the DB area: auth-sessionbugpriority: mediumsecurity

#45

by jared was closed 2026-09-15 21:32:09 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Shipped nginx/Netlify configs set no CSP, frame-ancestors or referrer policy area: build-cibugpriority: mediumsecurity

#44

by jared was closed 2026-09-15 22:24:43 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

1

Element Call iframe is same-origin, so its sandbox is a no-op area: callsbugpriority: mediumsecurity

#43

by jared was closed 2026-09-30 21:07:46 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

11

Settings are never synced across tabs — one tab's whole blob clobbers the other's area: settingsbugpriority: medium

#42

by jared was closed 2026-09-15 21:32:09 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Composer drafts survive logout and are auto-hydrated into the next account's session area: auth-sessionbugpriority: mediumsecurity

#41

by jared was closed 2026-09-12 14:59:47 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Read-position recompute walks all joined members and re-renders the whole timeline area: messagingbugperformancepriority: medium

#40

by jared was closed 2026-09-15 21:32:09 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Every text message subscribes to one global translation atom → timeline-wide re-render storms area: messagingbugperformancepriority: medium

#39

by jared was closed 2026-09-15 21:32:09 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Thread panel never shows read receipts (context provider is out of scope) area: threadsbugpriority: medium

#38

by jared was closed 2026-09-15 21:32:09 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Composer drafts are lost on page reload (only written on unmount) area: messagingbugpriority: medium

#37

by jared was closed 2026-09-15 21:32:08 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Scheduling from the composer drops formatting, mentions and the reply relation area: messagingbugpriority: medium

#36

by jared was closed 2026-09-15 21:32:08 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Creating a poll from the thread composer posts it to the main timeline area: threadsbugpriority: medium

#35

by jared was closed 2026-09-12 14:59:47 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Thread read receipts ignore the "Hide Typing & Read Receipts" setting area: threadsbugpriority: mediumsecurity

#34

by jared was closed 2026-09-12 14:59:47 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Speaker set is reallocated on every call-state push, re-rendering the app-wide call bar area: callsbugperformancepriority: medium

#32

by jared was closed 2026-09-15 22:43:33 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Soundboard upload limit double-counts staged clips and reads a stale count area: callsbugpriority: medium

#31

by jared was closed 2026-09-12 19:46:19 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Voice-channel "Channel Full" limit is bypassed by joining from the sidebar area: callsbugpriority: medium

#30

by jared was closed 2026-09-12 19:46:18 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Logging out mid-call never hangs up, leaving a ghost RTC membership area: callsbugpriority: medium

#29

by jared was closed 2026-09-18 22:39:46 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

PTT window blur/focus force-mutes unconditionally, revoking a manual unmute area: callsbugpriority: medium

#27

by jared was closed 2026-09-12 19:46:14 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Call-status bar bypasses the room screenshare/camera policy and the share confirmation area: callsbugpriority: medium

#26

by jared was closed 2026-09-12 19:46:18 -04:00

Audit 2026-09 · Medium & Low 2026-11-14

Policy List Viewer misses legacy Draupnir/Mjolnir policy event types, showing false "no rules found" area: moderationbugpriority: high

#22

by jared was closed 2026-09-12 14:59:49 -04:00

Audit 2026-09 · High 2026-10-14

Timed room mute silently overwrites a manual notification-mode change made during the mute window area: navigationbugpriority: high

#21

by jared was closed 2026-09-12 02:14:51 -04:00

Audit 2026-09 · High 2026-10-14