Block a user
Deafen button's aria-label is inverted relative to its tooltip
Halloween fog-band layers keep
willChange set even when motion is fully disabled
Answering an incoming video call turns the camera on, ignoring the user setting
Advanced Push Rule Editor silently strips the
highlight tweak from mention rules
Image compression in an E2EE room uploads plaintext and breaks the event
Scheduled messages bypass encryption — plaintext
m.room.message in E2EE rooms
GIF picker sends unencrypted media into encrypted rooms
Timed room mute silently overwrites a manual notification-mode change made during the mute window
EC fork audit 2026-09 — tracking index
lotusFlag/lotusParam URL cache is captured once at module load, not re-read
CI workflow has no
concurrency guard, unlike the cinny workflow it's modeled on
lotusCallState=1 in standalone (non-widget) mode builds the whole pipeline for nothing
Landscape filmstrip rail-shrink query is height-only, not orientation- or device-aware
Manual pin resolves by userId only, so multi-device users pin an arbitrary device
Decoration URLs derive from an unvalidated arbitrary profile field
Pinning during a screenshare removes the PiP even when the pin is a third party
Denoise external-module contracts are untyped
any and break silently on an asset bump
Audio-output sink is never restored when the selected device becomes undefined again
Denoise worklet node ignores its
channelCount: 1 (no channelCountMode: "explicit")
Dry/wet floor sums an undelayed dry copy with the delayed denoised path (comb filtering)