-
Notifications
You must be signed in to change notification settings - Fork 233
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
shouldRedact()'s exact-match key list doesn't normalize separators, missing snake_case sensitive fields (src/middleware/privacy-logger.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1047 In Disciplr-Org/Disciplr-backend;ETL worker silently defaults to Stellar TESTNET with no production safeguard (src/services/etlWorker.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1046 In Disciplr-Org/Disciplr-backend;listOrganizations() is unused dead code with no pagination (src/services/organization.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1045 In Disciplr-Org/Disciplr-backend;Leftover 'PASTE LOCATION' patch-script markers shipped in production code (src/services/expirationScheduler.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1044 In Disciplr-Org/Disciplr-backend;HTTP request-level idempotency keys are stored in a process-local Map, breaking retried requests in multi-instance deployments (src/services/idempotency.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1043 In Disciplr-Org/Disciplr-backend;Raw internal error messages are leaked to clients via AppError.internal(error.message), bypassing production redaction (src/routes/privacy.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1042 In Disciplr-Org/Disciplr-backend;httpMetricsMiddleware records ambiguous route labels, causing metric collisions across mounted sub-routers (src/observability/httpMetrics.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1041 In Disciplr-Org/Disciplr-backend;OAuth JWT_SECRET fallback is duplicated independently in a second file (src/middleware/oauthBearer.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1040 In Disciplr-Org/Disciplr-backend;Pino redact config doesn't cover req.body.client_secret (snake_case), letting OAuth secrets leak into logs (src/middleware/logger.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1039 In Disciplr-Org/Disciplr-backend;requireOrgAccess middleware is backed by an in-memory org store that's never populated in production (src/middleware/orgAuth.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1038 In Disciplr-Org/Disciplr-backend;Export download authorization relies on isOrgMember(), a dead in-memory check that's never populated (src/routes/exports.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1037 In Disciplr-Org/Disciplr-backend;VaultService silently swallows database errors instead of surfacing them to callers (src/services/vault.service.ts)
GRANTFOX OSSGrantFox open-source campaignGrantFox open-source campaignMAYBE REWARDEDEligible for GrantFox rewardEligible for GrantFox rewardOfficial Campaign | FWC26Official FWC26 campaign taskOfficial FWC26 campaign taskStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#1036 In Disciplr-Org/Disciplr-backend;