Issues - tinker_tickets - Lotus Git Server

LotusGuild/tinker_tickets

Labels Milestones New Issue

chartStatus should be reworked to be just currently open, pending, in progress tickets as a breakdown as over time closed will take up 99% of it. invalid priority/low ux

by jared was closed 2026-09-11 22:26:48 -04:00

No toolbar button inserts table syntax, despite README describing table rendering as a feature priority/low ux

by jared was closed 2026-09-11 15:20:23 -04:00

No debounce on the live markdown preview — full parser re-runs on every keystroke performance priority/low

by jared was closed 2026-09-11 14:49:57 -04:00

Markdown toolbar buttons clear the textarea's native undo/redo history priority/medium ux

by jared was closed 2026-09-08 20:46:44 -04:00

Requirements checker never verifies memory_limit/max_execution_time are set to sane values config priority/low

by jared was closed 2026-09-08 20:46:44 -04:00

App has no styled 500/fatal-error page — ErrorHandler is wired into essentially nothing priority/medium reliability

by jared was closed 2026-09-11 12:24:00 -04:00

DB connection failure leaks raw mysqli error text to any unauthenticated visitor priority/medium security

by jared was closed 2026-09-11 11:54:45 -04:00

index.php and create_ticket_api.php use their own raw mysqli connections instead of Database::getConnection() — missing charset/timezone sync on most page traffic data-integrity priority/high

by jared was closed 2026-09-11 11:54:45 -04:00

Dashboard 'Quick Assign' is completely non-functional — wrong callback contract priority/high ux

by jared was closed 2026-09-08 20:46:44 -04:00

Dashboard stats/chart minor cleanup: missing empty-state message, dead duplicate click-handler, dead computed field dead-code priority/low ux

by jared was closed 2026-09-08 20:46:44 -04:00

Attachment listing is completely unpaginated performance priority/low

by jared was closed 2026-09-08 21:18:23 -04:00

download_attachment.php has no HTTP Range/partial-content support performance priority/low

by jared was closed 2026-09-08 21:18:23 -04:00

Attachment 'thumbnails' are the full-size original image — no actual resized thumbnail is ever generated performance priority/medium

by jared was closed 2026-09-11 22:20:13 -04:00

Image attachments retain EXIF metadata (including GPS location) — served back verbatim to any user with ticket access priority/medium security

by jared was closed 2026-09-08 20:46:43 -04:00

Concurrent first-time logins for a brand-new user can throw an uncaught exception concurrency priority/medium reliability

by jared was closed 2026-09-08 20:46:43 -04:00

LDAP bind credentials transmitted in plaintext (no TLS) priority/medium security

by jared was closed 2026-09-12 01:02:18 -04:00

TRUSTED_PROXIES ships empty/disabled by default — full admin-impersonation risk if not explicitly configured config priority/high security

by jared was closed 2026-09-11 11:54:45 -04:00

Watch/unwatch actions are never logged to audit_log needs-decision priority/low

by jared was closed 2026-09-12 01:21:14 -04:00

README Dev Note #24's StatsModel invalidation caller list is missing an 8th caller (documentation gap, behavior is correct) documentation priority/low

by jared was closed 2026-09-08 20:46:43 -04:00

StatsModel: narrow dogpile cache-overwrite race can extend stale stats up to another full TTL after invalidation performance priority/low

by jared was closed 2026-09-08 20:46:42 -04:00

1 2 3 4 5 ...