Issues - tinker_tickets - Lotus Git Server

LotusGuild/tinker_tickets

Labels Milestones New Issue

13 of 33 API endpoints never disable display_errors — potential stack-trace leak priority/medium security

opened 2026-08-31 21:29:45 -04:00 by jared

ErrorHandler.php documented as global but only wired into 1 of 33 API endpoints priority/medium reliability

opened 2026-08-31 21:29:45 -04:00 by jared

Required-comment status-change flow isn't transactional (client and server) priority/medium reliability workflow

opened 2026-08-31 21:29:44 -04:00 by jared

Bulk-action buttons have no double-submit guard concurrency priority/medium ux

opened 2026-08-31 21:29:43 -04:00 by jared

create_ticket_api.php: dedup/escalation race can duplicate notifications or drop a real escalation concurrency notifications priority/medium

opened 2026-08-31 21:29:43 -04:00 by jared

Bulk operations: TOCTOU race on ticket status used for workflow validation concurrency priority/medium workflow

opened 2026-08-31 21:29:43 -04:00 by jared

Bulk operations aren't actually atomic despite the docblock claiming so priority/medium reliability

opened 2026-08-31 21:29:42 -04:00 by jared

1 2