-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[Housekeeping] canonicalPathname double-slash 308 redirect; deferred notFound() keeps HTTP 200
area: routingPath normalization, route precedence, intercept markersPath normalization, route precedence, intercept markersbugSomething isn't workingSomething isn't workingseverity: low-hangingPolish, tech debt, missing docsPolish, tech debt, missing docsStatus: Open.#58 In thinkter/brandy;[Info] redirect()/streamRedirect() destinations not validated (open-redirect hardening)
documentationImprovements or additions to documentationImprovements or additions to documentationsecuritySecurity-relevant findingSecurity-relevant findingStatus: Open.#57 In thinkter/brandy;[Info] CSRF origin check fails closed behind a TLS-terminating proxy (docs/DX)
documentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#56 In thinkter/brandy;[Low] injectIntoFirstChunk can corrupt bytes when a multibyte UTF-8 char splits at the chunk boundary
area: streamingrenderPipelineStreaming / progressive enhancement under streamsrenderPipelineStreaming / progressive enhancement under streamsbugSomething isn't workingSomething isn't workingseverity: low-hangingPolish, tech debt, missing docsPolish, tech debt, missing docsStatus: Open.#55 In thinkter/brandy;[Low] Literal </template> in app-rendered raw HTML breaks the streaming wrapper
area: streamingrenderPipelineStreaming / progressive enhancement under streamsrenderPipelineStreaming / progressive enhancement under streamsbugSomething isn't workingSomething isn't workingseverity: low-hangingPolish, tech debt, missing docsPolish, tech debt, missing docsStatus: Open.#54 In thinkter/brandy;[Medium] Streaming routes skip error boundaries on ancestor-layout loader failure
area: streamingrenderPipelineStreaming / progressive enhancement under streamsrenderPipelineStreaming / progressive enhancement under streamsbugSomething isn't workingSomething isn't workingseverity: mediumCorrectness/parity gap with measurable user impactCorrectness/parity gap with measurable user impactStatus: Open.#53 In thinkter/brandy;[Medium] Boot-time template sweep escalates app-side HTML injection to forced redirect / DOM replacement
area: client-runtimeClient runtime.ts: navigation, intercept, prefetch, reconciliationClient runtime.ts: navigation, intercept, prefetch, reconciliationsecuritySecurity-relevant findingSecurity-relevant findingseverity: mediumCorrectness/parity gap with measurable user impactCorrectness/parity gap with measurable user impactStatus: Open.#52 In thinkter/brandy;HEAD requests to streaming routes return the full body (HEAD handled only on sync path)
area: streamingrenderPipelineStreaming / progressive enhancement under streamsrenderPipelineStreaming / progressive enhancement under streamsbugSomething isn't workingSomething isn't workingseverity: low-hangingPolish, tech debt, missing docsPolish, tech debt, missing docsStatus: Open.#28 In thinkter/brandy;