google-labs-jules[bot]andPR0M3TH3AN 2f78bc6632 Fix Open Redirect and XSS via NIP-46 Authentication URL ...

- Validated `pendingAuthUrl` protocol to be `http:` or `https:` in `js/ui/loginModalController.js`.
- Logged warning if unsafe URL is encountered.

Signed-off-by: Jules <[email protected]>

Co-authored-by: PR0M3TH3AN <[email protected]>

2026-02-07 23:13:31 +00:00

..

app

Refactor hardcoded feed identifiers to use constants

2026-02-07 21:59:37 +00:00

attachments

Add DM attachment upload and preview flow

2026-01-19 12:51:34 -05:00

designSystem

Refactor releaseScope in dynamicStyles.js to avoid O(N) stylesheet scan.

2026-02-05 20:31:23 +00:00

dom

refactor: migrate console usage to shared loggers

2025-10-15 14:37:25 -04:00

feedEngine

perf: optimize createExploreDiversitySorter with inverted index

2026-02-07 16:55:05 +00:00

nostr

Merge pull request #2181 from PR0M3TH3AN/refactor/deduplicate-hex64-regex-4819369490365472168

2026-02-07 16:57:49 -05:00

payments

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

search

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

services

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

state

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

storage

chore(ai): remove dead code (agent)

2026-01-26 20:29:38 +00:00

ui

Fix Open Redirect and XSS via NIP-46 Authentication URL

2026-02-07 23:13:31 +00:00

utils

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

workers

feat(perf): offload explore data computation to web worker

2026-02-05 17:00:13 +00:00

accessControl.js

fix: ensure access control lists are loaded before playback

2026-01-23 04:39:18 +00:00

adminListStore.js

Revert "Dead Code Cleanup"

2026-01-30 16:51:01 -05:00

app.js

Merge pull request #2183 from PR0M3TH3AN/jules-fix-unused-import-appjs-3659969045676148831

2026-02-07 17:40:17 -05:00

applicationContext.js

Refactor app orchestrator into Application with dependency injection

2025-10-03 21:10:22 -04:00

bootstrap.js

Add S3 storage option to upload modal

2026-01-24 20:00:00 -05:00

bufferPolyfill.js

fix: switch to jsdelivr for external modules

2026-01-07 17:30:22 +00:00

channelProfile.js

Centralize relay list subscriptions

2026-01-29 16:32:11 -05:00

config.js

Revert "Dead Code Cleanup"

2026-01-30 16:51:01 -05:00

constants.js

Refactor hardcoded feed identifiers to use constants

2026-02-07 21:59:37 +00:00

designSystem.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

directMessagesStore.js

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

disclaimer.js

chore(ai): format sources and fix moderation bugs (agent)

2026-01-22 14:58:35 +00:00

dmDecryptor.js

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

docsView.js

Modernize docs navigation buttons with icons

2026-01-27 19:43:24 +00:00

embed.js

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

embedDiagnostics.js

Debug: forward embed logs to parent when embed_debug=1

2026-01-24 22:29:18 +00:00

exploreView.js

Add explore view empty state and info popover

2026-01-22 19:27:40 -05:00

forYouView.js

feat: add info icon with filter logic popover to For You feed

2026-01-21 17:48:01 +00:00

gridHealth.js

docs: add detailed webtorrent architecture and regression prevention comments

2026-02-01 19:35:02 +00:00

hashChangeHandler.js

Refactor hardcoded feed identifiers to use constants

2026-02-07 21:59:37 +00:00

hashView.js

Fix: Preserve ?v= parameter when auto-redirecting to For You feed

2026-01-23 04:19:40 +00:00

historyView.js

chore(ai): remove dead code (agent)

2026-01-27 20:33:25 +00:00

index.js

Add S3 storage option to upload modal

2026-01-24 20:00:00 -05:00

kidsView.js

Add kids feed view

2026-01-23 02:09:08 -05:00

lists.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

magnets.js

Revert "Fix ignored webseeds in magnet links"

2026-01-30 17:04:15 -05:00

magnetShared.js

chore(ai): remove dead code (agent)

2026-01-27 20:33:25 +00:00

magnetUtils.js

Add btih extraction helper

2026-01-26 21:49:18 -05:00

nostrClientFacade.js

chore(ai): add automated PR review report

2026-01-28 23:49:33 +00:00

nostrClientRegistry.js

chore(ai): add automated PR review report

2026-01-28 23:49:33 +00:00

nostrEventSchemas.js

Add subscription history and backup/restore functionality

2026-02-02 03:05:13 +00:00

nostrPublish.js

perf(nostr): optimistic relay publishing

2026-02-05 21:03:44 +00:00

nostrToolsBootstrap.js

Fix nostr-tools bootstrapping, UploadModal zombie callbacks, and service error handling

2026-01-27 03:15:32 +00:00

nostrViewEventsFacade.js

Add nostr facades for client, view events, and watch history

2025-10-22 22:17:30 -04:00

nostrWatchHistoryFacade.js

Add nostr facades for client, view events, and watch history

2025-10-22 22:17:30 -04:00

nwcSettings.js

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

playbackUtils.js

Document torrent playback normalization details

2025-09-24 15:23:24 -04:00

r2.js

Refactor R2 key prefix for deterministic identifiers

2026-01-26 12:47:05 -05:00

reactionCounter.js

I've removed unused exports and functions to improve codebase cleanliness:

2026-01-19 20:46:47 +00:00

relayManager.js

Improve relay hygiene and count status

2026-01-29 09:58:35 -05:00

searchView.js

chore(ai): remove dead code (agent)

2026-01-23 20:33:06 +00:00

sidebar.js

Remove IPNS support and related content

2026-01-19 02:13:59 +00:00

sidebarLoading.js

Align sidebar loading indicators and history heading

2025-10-01 13:42:50 -04:00

subscriptions.js

perf: speed up post-login list sync with shared decryption cache

2026-02-07 13:43:15 +00:00

themeController.js

Revert "Dead Code Cleanup"

2026-01-30 16:51:01 -05:00

urlHealthObserver.js

I've removed unused exports and functions to improve codebase cleanliness:

2026-01-19 20:46:47 +00:00

userBlocks.js

perf: speed up post-login list sync with shared decryption cache

2026-02-07 13:43:15 +00:00

videoEventUtils.js

I've removed unused exports and functions to improve codebase cleanliness:

2026-01-19 20:46:47 +00:00

viewCounter.js

Improve relay hygiene and count status

2026-01-29 09:58:35 -05:00

viewManager.js

Refactor hardcoded feed identifiers to use constants

2026-02-07 21:59:37 +00:00

watchHistoryDebug.js

refactor: migrate console usage to shared loggers

2025-10-15 14:37:25 -04:00

watchHistoryService.js

fix(ci): prevent signer hangs in tests and background services

2026-01-31 08:14:53 +00:00

webtorrent-global.js

Ensure Beacon loads WebTorrent module

2025-10-15 12:49:46 -04:00

webtorrent.js

fix: robustify WebTorrent playback startup to prevent gray screen

2026-02-01 20:30:59 +00:00

webtorrent.min.js

updated directory structure to fix root Service Worker issues and performance improvements

2025-02-05 16:54:40 -05:00

webtorrent.min.js.map

updated directory structure to fix root Service Worker issues and performance improvements

2025-02-05 16:54:40 -05:00