2026-03-27 - 2026-06-27

Overview

0 Active Pull Requests
32 Active Issues
Excluding merges, 2 authors have pushed 32 commits to main and 32 commits to all branches. On main, 21 files have changed and there have been 4488 additions and 250 deletions.

28 Issues closed from 1 user

Closed #32 [Bug] <img>-Tags laden nicht bei aktivem APP_PASSWORD 2026-05-27 14:45:48 +02:00

Closed #27 [Quality] HTTP-Status-Codes vereinheitlichen + Job-Dict typisieren 2026-05-27 14:01:27 +02:00

Closed #26 [Quality] DRY: Tempdir-Validation und Extension-Listen zentralisieren 2026-05-27 13:58:09 +02:00

Closed #25 [Quality] Logging-Infrastruktur + bare except eliminieren 2026-05-27 13:55:15 +02:00

Closed #24 [Perf/UX] Frontend: Polling-Backoff, Virtualisierung, Memo 2026-05-27 13:51:31 +02:00

Closed #23 [Perf] Thumbnail-Endpoint + pHash/EXIF-Cache 2026-05-27 13:16:19 +02:00

Closed #22 [Perf] Bilder werden 2-3x pro Bild dekodiert in analyze_folder 2026-05-27 13:10:55 +02:00

Closed #21 [Bug] Silent Failures: AI ohne Key, HEIC ohne pillow-heif, Export-Skips 2026-05-27 13:08:48 +02:00

Closed #20 [Bug] /download loescht Quelle auch bei fehlgeschlagenem ZIP-Schreiben 2026-05-27 13:04:49 +02:00

Closed #19 [Bug] Unbounded _jobs-Dict + Race in /export/download vs Cleanup 2026-05-27 13:03:33 +02:00

Closed #18 [Bug] Pillow-Resource-Leak: Image.open() ohne with-Statement 2026-05-27 13:01:44 +02:00

Closed #17 [Security] CORS, Security-Header, Token-Speicherung 2026-05-27 12:59:40 +02:00

Closed #16 [Security] /browse und /move ohne Pfad-Sandboxing 2026-05-27 12:52:37 +02:00

Closed #15 [Security] DOM-XSS via innerHTML mit User-Inputs (Dateinamen, Browse) 2026-05-27 12:32:37 +02:00

Closed #14 [Security] IDOR: Job- und ZIP-IDs nicht an Session gebunden 2026-05-27 12:30:09 +02:00

Closed #13 [Security] Auth-Hardening: Timing-Attack, fehlendes Rate-Limit 2026-05-27 12:25:47 +02:00

Closed #11 Server-Neustart (--reload) löscht alle laufenden Upload-Sessions 2026-04-23 14:32:23 +02:00

Closed #12 Tinder-Undo: Favoriten-Status inkonsistent nach manuellem Stern-Klick 2026-04-23 14:32:23 +02:00

Closed #10 datetime-Rename: Duplikate erhalten hässliche _1, _2 Suffixe 2026-04-23 14:28:17 +02:00

Closed #9 PNG-Transparenz geht beim Export lautlos verloren (immer JPEG-Output) 2026-04-23 14:28:16 +02:00

Closed #8 UX: Horizont-Erkennung nutzt nur erstes Foto als Sample für alle 2026-04-23 14:28:16 +02:00

Closed #7 ExportRequest: text_watermark verwendet mutable default dict 2026-04-23 14:24:49 +02:00

Closed #6 Thread-Safety: _jobs-Dict wird ohne Lock aus mehreren Threads geschrieben 2026-04-23 14:24:49 +02:00

Closed #5 Kein Upload-Größenlimit — RAM/Disk-Erschöpfung möglich 2026-04-23 14:24:49 +02:00

Closed #4 Disk-Leak: Export-ZIPs werden nicht automatisch gelöscht 2026-04-23 14:24:49 +02:00

Closed #3 Security: Auth-Tokens laufen nie ab (_sessions wächst unbegrenzt) 2026-04-23 14:22:50 +02:00

Closed #2 Security: CORS allow_headers enthält kein Authorization 2026-04-23 14:22:50 +02:00

Closed #1 Security: Path Traversal in /preview und /detect-angle 2026-04-23 14:22:50 +02:00

32 Issues created by 1 user

Opened #1 Security: Path Traversal in /preview und /detect-angle 2026-04-23 14:13:51 +02:00

Opened #2 Security: CORS allow_headers enthält kein Authorization 2026-04-23 14:14:01 +02:00

Opened #3 Security: Auth-Tokens laufen nie ab (_sessions wächst unbegrenzt) 2026-04-23 14:14:01 +02:00

Opened #4 Disk-Leak: Export-ZIPs werden nicht automatisch gelöscht 2026-04-23 14:14:18 +02:00

Opened #5 Kein Upload-Größenlimit — RAM/Disk-Erschöpfung möglich 2026-04-23 14:14:18 +02:00

Opened #6 Thread-Safety: _jobs-Dict wird ohne Lock aus mehreren Threads geschrieben 2026-04-23 14:14:18 +02:00

Opened #7 ExportRequest: text_watermark verwendet mutable default dict 2026-04-23 14:14:18 +02:00

Opened #10 datetime-Rename: Duplikate erhalten hässliche _1, _2 Suffixe 2026-04-23 14:14:38 +02:00

Opened #11 Server-Neustart (--reload) löscht alle laufenden Upload-Sessions 2026-04-23 14:14:38 +02:00

Opened #12 Tinder-Undo: Favoriten-Status inkonsistent nach manuellem Stern-Klick 2026-04-23 14:14:38 +02:00

Opened #8 UX: Horizont-Erkennung nutzt nur erstes Foto als Sample für alle 2026-04-23 14:14:38 +02:00

Opened #9 PNG-Transparenz geht beim Export lautlos verloren (immer JPEG-Output) 2026-04-23 14:14:38 +02:00

Opened #13 [Security] Auth-Hardening: Timing-Attack, fehlendes Rate-Limit 2026-05-27 12:21:04 +02:00

Opened #18 [Bug] Pillow-Resource-Leak: Image.open() ohne with-Statement 2026-05-27 12:21:05 +02:00

Opened #19 [Bug] Unbounded _jobs-Dict + Race in /export/download vs Cleanup 2026-05-27 12:21:05 +02:00

Opened #21 [Bug] Silent Failures: AI ohne Key, HEIC ohne pillow-heif, Export-Skips 2026-05-27 12:21:05 +02:00

Opened #22 [Perf] Bilder werden 2-3x pro Bild dekodiert in analyze_folder 2026-05-27 12:21:05 +02:00

Opened #24 [Perf/UX] Frontend: Polling-Backoff, Virtualisierung, Memo 2026-05-27 12:21:05 +02:00

Opened #20 [Bug] /download loescht Quelle auch bei fehlgeschlagenem ZIP-Schreiben 2026-05-27 12:21:05 +02:00

Opened #15 [Security] DOM-XSS via innerHTML mit User-Inputs (Dateinamen, Browse) 2026-05-27 12:21:05 +02:00

Opened #17 [Security] CORS, Security-Header, Token-Speicherung 2026-05-27 12:21:05 +02:00

Opened #23 [Perf] Thumbnail-Endpoint + pHash/EXIF-Cache 2026-05-27 12:21:05 +02:00

Opened #14 [Security] IDOR: Job- und ZIP-IDs nicht an Session gebunden 2026-05-27 12:21:05 +02:00

Opened #16 [Security] /browse und /move ohne Pfad-Sandboxing 2026-05-27 12:21:05 +02:00

Opened #25 [Quality] Logging-Infrastruktur + bare except eliminieren 2026-05-27 12:21:06 +02:00

Opened #27 [Quality] HTTP-Status-Codes vereinheitlichen + Job-Dict typisieren 2026-05-27 12:21:06 +02:00

Opened #26 [Quality] DRY: Tempdir-Validation und Extension-Listen zentralisieren 2026-05-27 12:21:06 +02:00

Opened #28 [Security] Token in HttpOnly+SameSite-Cookie statt sessionStorage 2026-05-27 12:59:30 +02:00

Opened #29 [Perf] pHash- und EXIF-Disk-Cache zwischen Runs 2026-05-27 13:14:28 +02:00

Opened #30 [Perf/UX] Review-Liste: Lazy-Loading der Thumbnails via IntersectionObserver 2026-05-27 13:50:10 +02:00

Opened #31 [Quality] Job-Dict typisieren mit Pydantic-Modell 2026-05-27 14:00:10 +02:00

Opened #32 [Bug] <img>-Tags laden nicht bei aktivem APP_PASSWORD 2026-05-27 14:45:48 +02:00