Block a user
Incoming
io.lotus.* toWidget actions are accepted from any origin
lotusCallState=1 in standalone (non-widget) mode builds the whole pipeline for nothing
Deafen via per-participant setVolume is undone by EC volume controls and clobbers tile volumes on undeafen
Denoise restart fallback hands LiveKit the raw mic as
processedTrack, which later gets stopped
Racing
LocalTrackPublished events start two denoise processors (two AudioContexts, two wasm inits)
Deafen button's aria-label is inverted relative to its tooltip
Halloween fog-band layers keep
willChange set even when motion is fully disabled
Answering an incoming video call turns the camera on, ignoring the user setting
Advanced Push Rule Editor silently strips the
highlight tweak from mention rules
Image compression in an E2EE room uploads plaintext and breaks the event
Scheduled messages bypass encryption — plaintext
m.room.message in E2EE rooms
GIF picker sends unencrypted media into encrypted rooms
Timed room mute silently overwrites a manual notification-mode change made during the mute window
EC fork audit 2026-09 — tracking index
lotusFlag/lotusParam URL cache is captured once at module load, not re-read
CI workflow has no
concurrency guard, unlike the cinny workflow it's modeled on
lotusCallState=1 in standalone (non-widget) mode builds the whole pipeline for nothing
Landscape filmstrip rail-shrink query is height-only, not orientation- or device-aware