Mark/tokengenerator
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Labels Milestones
New issue
0 Open 21 Closed 21 All
Label
Clear labels
blocked:lint-failed
blocked:needs-decision
blocked:needs-human
blocked:no-changes
blocked:pre-dispatch
bug
feature-request
in-progress
triage-approved
Milestone
No milestone
Projects
Clear projects
Open projects
3d printing
cyguin
Assignee
Clear assignees
No assignee
Mark
[Security] HIGH: 2 issue(s) found in tokengenerator
1
#21 by Mark was closed 2026-05-15 06:34:14 +00:00
[smoke-test] Test coverage review: 1 source files, 0 test files (0.0%)
bug
#20 by Mark was closed 2026-05-14 20:01:13 +00:00
No .gitignore + tracked node_modules (742) and dist (39) — build artifacts and missing gitignore
blocked:no-changes
1
#19 by Mark was closed 2026-05-20 19:38:58 +00:00
No CLI interface
triage-approved
3
#18 by Mark was closed 2026-05-27 11:28:35 +00:00
No token revocation or blacklist
blocked:needs-decision
2
#17 by Mark was closed 2026-05-15 13:18:26 +00:00
No rate limiting on generation
blocked:no-changes
1
#16 by Mark was closed 2026-05-20 19:38:58 +00:00
No storage backend abstraction
blocked:needs-decision
2
#15 by Mark was closed 2026-05-15 13:18:25 +00:00
No token metadata or tagging
blocked:needs-decision
#14 by Mark was closed 2026-05-26 23:30:56 +00:00
No token expiration or TTL
blocked:no-changes
2
#13 by Mark was closed 2026-05-20 19:38:59 +00:00
No batch generation mode
blocked:no-changes
1
#12 by Mark was closed 2026-05-20 19:38:59 +00:00
No token format validation
#11 by Mark was closed 2026-05-15 16:21:47 +00:00
No token-level entropy analysis
blocked:needs-decision
2
#10 by Mark was closed 2026-05-15 13:18:25 +00:00
LOW: No Content-Security-Policy (CSP) headers — no XSS protection
#9 by Mark was closed 2026-05-15 15:19:44 +00:00
LOW: No validation of AI-suggested icon values — silent failure if AI returns invalid icon name
#8 by Mark was closed 2026-05-09 08:02:28 +00:00
LOW: Race condition on rapid AI icon generation — no abort controller
#7 by Mark was closed 2026-05-15 16:43:54 +00:00
MEDIUM: No input validation on canvas dimensions — zero/negative values cause rendering issues
#6 by Mark was closed 2026-05-15 16:24:00 +00:00
MEDIUM: Missing error handling for canvas.toDataURL (SecurityError risk)
#5 by Mark was closed 2026-05-09 08:02:28 +00:00
MEDIUM: Download filename vulnerable to injection / path traversal
blocked:needs-human
2
#4 by Mark was closed 2026-05-12 01:40:02 +00:00
MEDIUM: API key transmitted as URL query parameter instead of HTTP header
#3 by Mark was closed 2026-05-09 08:02:28 +00:00
HIGH: Prompt injection vulnerability via unsanitized user input
1
#2 by Mark was closed 2026-05-21 00:17:18 +00:00