-
Notifications
You must be signed in to change notification settings - Fork 41
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Backend: API has no versioning prefix — breaking changes have no deprecation path
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#207 In Stellar-Deejah/-LineProof;Contracts: QueueFactory deploy_queue() uses default salt for contract deployment — address is front-runnable
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#206 In Stellar-Deejah/-LineProof;Contracts: EscrowConfig deposit function silently becomes self-administered when no config exists — any depositor becomes escrow admin
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#204 In Stellar-Deejah/-LineProof;Frontend: DashboardPage lookup has no AbortController — in-flight fetch not cancelled on rapid re-lookups
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#203 In Stellar-Deejah/-LineProof;CI: deploy-testnet.yml captures no contract addresses from deployment outputs — deployment summary is useless
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#200 In Stellar-Deejah/-LineProof;Docs: No contract ABI documentation and no API versioning strategy — operators cannot integrate safely
documentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#195 In Stellar-Deejah/-LineProof;Frontend: nginx.conf CSP allows unsafe-inline styles — weakens XSS protection unnecessarily
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#192 In Stellar-Deejah/-LineProof;Frontend: index.html missing Open Graph, meta description, and theme-color — poor SEO and link unfurling
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#191 In Stellar-Deejah/-LineProof;Frontend: QueuePage looksLikeStellar regex admits invalid base32 characters — 0,1,8,9 accepted
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#188 In Stellar-Deejah/-LineProof;CI: No CODEOWNERS file and no secret scanning — PRs have no auto-reviewers and secrets can be committed silently
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#186 In Stellar-Deejah/-LineProof;Backend: slug and name fields accept HTML/script injection — no format validation beyond length
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#183 In Stellar-Deejah/-LineProof;Backend: GET /api/enrollments endpoints return unbounded lists — no pagination on identity or queue lookups
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#182 In Stellar-Deejah/-LineProof;