All issues

Search results

Extract shared WebSocket authentication helper in ws.get.ts

code-quality

sonarcloud

Status: Open.

#197In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

Document DOMPurify security rationale and evaluate img tag privacy risk

documentationImprovements or additions to documentationImprovements or additions to documentation

security

sonarcloud

Status: Open.

#196In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

Add database format version header for safe migration

security

sonarcloud

Status: Open.

#195In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

Harden database keyring error handling and key persistence

critical

security

sonarcloud

Status: Open.

#194In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

Remove duplicate isomorphic-dompurify dependencies from root package.json

code-quality

sonarcloud

Status: Open.

#193In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

Fallow dead-code false positives with Nuxt auto-imports and file-based routing

Status: Open.

#192In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

[META] Audit Remediation Tracking

audit

security

Status: Open.

#187In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

[MEDIUM-5] Limited Transaction Usage

audit

security

Status: Open.

#186In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

[MEDIUM-4] Type Safety Issues (@ts-ignore, as any)

audit

security

Status: Open.

#185In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

[MEDIUM-2] No Soft-Delete in Prisma Schema

audit

security

Status: Open.

#183In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

[MEDIUM-1] WebSocket No Per-Message Auth

audit

security

Status: Open.

#182In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026

[HIGH-8] verify_client_certificate() Dead Code

audit

highHigh severityHigh severity

security

Status: Open.

#181In BillyOutlast/drop;

· BillyOutlast opened on Jul 28, 2026