Filters 0 Sort Updated Asc
All issues
50
TRACK-6
P1
Self-host frontend assets instead of executing third-party CDN scripts
Done
TRACK-7
P1
Upgrade x/image to remediate reachable image-decoder vulnerabilities
Done
TRACK-8
P1
Set Secure session cookies correctly behind TLS-terminating proxies
Done
TRACK-2
P1
Expire login session tokens on the server
Done
TRACK-1
P1
Rate-limit and deadline public authentication endpoints
Done
TRACK-3
P1
Make object-store deletions retryable and reconcilable
Done
TRACK-4
P2
Stop writing auth token usage on every request
Done
TRACK-5
P2
Recover from realtime event gaps instead of silently diverging
Done
TRACK-12
P3
Prevent external Markdown images from acting as tracking pixels
Done
TRACK-9
P2
Add CSRF protection to cookie-authenticated UI mutations and login
Done
TRACK-15
P2
Fix issue Context navigation, edit safety, and sidebar sizing
Done
TRACK-17
P2
Show canonical sprint IDs on every sprint card
Done
TRACK-16
P3
Show canonical sprint refs beside sprint titles
Done
TRACK-14
P2
Add accessible tooltips to icon-only actions
Done
TRACK-10
P2
Fail closed on WebSocket origins in production
Done
TRACK-13
P3
Move sprint issue disclosure to the card footer and label its state
Done
TRACK-11
P2
Add a baseline browser security-header policy
Done
TRACK-18
P2
Enable public read-only project access from the Members page
Done
TRACK-19
P2
Hide edit controls wherever the viewer lacks write access
Done
TRACK-26
P2
Optionally allow authenticated public users to create project issues
Done
TRACK-27
P2
Allow projects to block users
Done
TRACK-24
P2
Show “No scheduled dates” for an undated active sprint
Done
TRACK-23
P2
Hide active-sprint issue controls when no sprint is active
Done
TRACK-25
P2
Label sprint issue counts with “Issue” or “Issues”
Done
TRACK-21
P2
Stop autofilling usernames when adding project members
Done
TRACK-20
P2
Add project-owner breadcrumbs and owner project listings
Done
TRACK-22
P2
Show ticket completion rate over time on the project About page
Done
TRACK-28
P3
Add configurable browser push notifications
Done
TRACK-29
P3
Link issues to GitHub branches and pull requests
Done
TRACK-30
P0
Fix trackslash.com monitoring in UptimeRobot
Done
TRACK-31
P2
Move GitHub connection and issue-linking flows into modals
Done
TRACK-32
P2
Show subtask completion progress on sprint cards
Done
TRACK-33
P2
Fix legal links and profile placement in the collapsed sidebar
Done
TRACK-34
P2
Prevent hidden sidebar labels from stretching collapsed navigation items
Done
TRACK-35
P2
Move legal links from the sidebar to Settings
Done
TRACK-36
P2
Show sub-issue completion progress in issue rows
Done
TRACK-37
P2
Hide sub-issues from top-level issue lists
Done
TRACK-38
P2
Display timestamps in the user’s local timezone
Done
TRACK-39
P2
Fix CSRF validation when creating tokens from the Tokens page
Done
TRACK-40
P2
Fix the sidebar collapse button in the collapsed state
Done
TRACK-41
P2
Move all inline add and create interactions into modals
Done
TRACK-42
P2
Render legal links as a bare Settings page footer
Done
TRACK-43
P2
Keep the issue title edit action attached to the title
Done
TRACK-47
P3
Web portal 404s on URLs with a trailing slash
Done
TRACK-49
P2
No NotFound or MethodNotAllowed handlers: unstyled 404 and empty 405 responses
Done
TRACK-56
P1
GET /static/ serves a directory listing and all HTTP methods are accepted
Done
TRACK-55
P3
HEAD returns 405 on every route except / and /static
Done
TRACK-51
P2
CORS AllowedMethods omits PUT, making three API routes unreachable cross-origin
Done
TRACK-48
P1
Members named access or blocks hijack the member-role route and mutate project settings
Done
TRACK-60
P1
Creating a new project fails with CSRF validation failed
Done
Loading more issues...