Block a user
useTauriCallPower never releases the native keep-awake state on unmount
Page Zoom input silently discards a typed-but-unconfirmed value on blur
Halloween fog-band layers keep
willChange set even when motion is fully disabled
seasonalThemeOverride is the only enum setting with no persisted-value validation
Documented secondary glow/blink keyframes for animated backgrounds don't exist
Earth Day globe decoration risks sitting over the composer
Cross-tab session sync is absent on the auth pages
Documented "leading emoji rendered 1.15× larger" room-name feature is not implemented
GIF picker sends search terms and IP directly to Giphy, outside any privacy setting
Location messages load an OpenStreetMap iframe with no facade or auto-load gate
Any OIDC login failure discards the cached dynamic client id
Avatar-decoration slug from a remote profile is interpolated into a URL unvalidated
KaTeX renders remote LaTeX with no
maxSize/maxExpand limits
Sender-only search returns membership/state/reaction events as results
Forwarding an encrypted attachment into a plaintext room publishes its AES key
In-iframe PTT/deafen key listeners are lost if the EC iframe reloads
RoomMemberEvent.Membership listener on Room never fires (dead handler)
CallControl.setPipMode writes state nothing reads
Soundboard clip blob URLs are never revoked and survive logout
No warning when closing the tab or reloading during an active call