2026-05-26 - 2026-08-26
Overview
There has been no commit activity in this period.
16 Issues closed from 1 user
Closed
#32 [Bug] <img>-Tags laden nicht bei aktivem APP_PASSWORD
Closed
#27 [Quality] HTTP-Status-Codes vereinheitlichen + Job-Dict typisieren
Closed
#26 [Quality] DRY: Tempdir-Validation und Extension-Listen zentralisieren
Closed
#25 [Quality] Logging-Infrastruktur + bare except eliminieren
Closed
#24 [Perf/UX] Frontend: Polling-Backoff, Virtualisierung, Memo
Closed
#23 [Perf] Thumbnail-Endpoint + pHash/EXIF-Cache
Closed
#22 [Perf] Bilder werden 2-3x pro Bild dekodiert in analyze_folder
Closed
#21 [Bug] Silent Failures: AI ohne Key, HEIC ohne pillow-heif, Export-Skips
Closed
#20 [Bug] /download loescht Quelle auch bei fehlgeschlagenem ZIP-Schreiben
Closed
#19 [Bug] Unbounded _jobs-Dict + Race in /export/download vs Cleanup
Closed
#18 [Bug] Pillow-Resource-Leak: Image.open() ohne with-Statement
Closed
#17 [Security] CORS, Security-Header, Token-Speicherung
Closed
#16 [Security] /browse und /move ohne Pfad-Sandboxing
Closed
#15 [Security] DOM-XSS via innerHTML mit User-Inputs (Dateinamen, Browse)
Closed
#14 [Security] IDOR: Job- und ZIP-IDs nicht an Session gebunden
Closed
#13 [Security] Auth-Hardening: Timing-Attack, fehlendes Rate-Limit
20 Issues created by 1 user
Opened
#13 [Security] Auth-Hardening: Timing-Attack, fehlendes Rate-Limit
Opened
#16 [Security] /browse und /move ohne Pfad-Sandboxing
Opened
#21 [Bug] Silent Failures: AI ohne Key, HEIC ohne pillow-heif, Export-Skips
Opened
#22 [Perf] Bilder werden 2-3x pro Bild dekodiert in analyze_folder
Opened
#24 [Perf/UX] Frontend: Polling-Backoff, Virtualisierung, Memo
Opened
#20 [Bug] /download loescht Quelle auch bei fehlgeschlagenem ZIP-Schreiben
Opened
#15 [Security] DOM-XSS via innerHTML mit User-Inputs (Dateinamen, Browse)
Opened
#19 [Bug] Unbounded _jobs-Dict + Race in /export/download vs Cleanup
Opened
#17 [Security] CORS, Security-Header, Token-Speicherung
Opened
#23 [Perf] Thumbnail-Endpoint + pHash/EXIF-Cache
Opened
#18 [Bug] Pillow-Resource-Leak: Image.open() ohne with-Statement
Opened
#14 [Security] IDOR: Job- und ZIP-IDs nicht an Session gebunden
Opened
#25 [Quality] Logging-Infrastruktur + bare except eliminieren
Opened
#27 [Quality] HTTP-Status-Codes vereinheitlichen + Job-Dict typisieren
Opened
#26 [Quality] DRY: Tempdir-Validation und Extension-Listen zentralisieren
Opened
#28 [Security] Token in HttpOnly+SameSite-Cookie statt sessionStorage
Opened
#29 [Perf] pHash- und EXIF-Disk-Cache zwischen Runs
Opened
#30 [Perf/UX] Review-Liste: Lazy-Loading der Thumbnails via IntersectionObserver
Opened
#31 [Quality] Job-Dict typisieren mit Pydantic-Modell
Opened
#32 [Bug] <img>-Tags laden nicht bei aktivem APP_PASSWORD