Block a user
Speaker set is reallocated on every call-state push, re-rendering the app-wide call bar
Right-clicking the call button silently starts a camera-on video call
Incoming-call ringtone ignores quiet hours, DND and Focus Assist
Shipped nginx/Netlify configs set no CSP, frame-ancestors or referrer policy
Production already sent a full CSP (frame-ancestors 'none', HSTS, nosniff, referrer policy), so the original finding only applied to the shipped Docker/Netlify configs — fixed in 039b74c2 (#95).…
Shipped nginx/Netlify configs set no CSP, frame-ancestors or referrer policy
Composer drafts are lost on page reload (only written on unmount)
Thread panel never shows read receipts (context provider is out of scope)
Read-position recompute walks all joined members and re-renders the whole timeline
Every text message subscribes to one global translation atom → timeline-wide re-render storms
Settings are never synced across tabs — one tab's whole blob clobbers the other's
Logout's search-index wipe can report success while another tab still holds the DB
Scheduling from the composer drops formatting, mentions and the reply relation