google-labs-jules[bot]andPR0M3TH3AN 57551a8acd security: fix magnet parameter injection and data loss ...

- Fix magnet parameter injection vulnerability in `js/magnetShared.js` by ensuring all parameter values are decoded during normalization and re-encoded during URI construction.
- Fix a data loss bug in `normalizeMagnetInput` where parameter values containing `=` were truncated due to `split("=", 2)`.
- Consistently decode all magnet parameter values to ensure a clean internal representation.
- Use `encodeURIComponent` in `buildMagnetUri` to safely reconstruct the magnet URI.
- Update `tests/edit-modal-submit-state.test.mjs` and `tests/video-note-payload.test.mjs` to handle encoded magnet URIs.

Co-authored-by: PR0M3TH3AN <[email protected]>

2026-02-11 11:41:17 +00:00

..

app

fix(tests): resolve race condition in moderation overrides test

2026-01-27 14:45:40 +00:00

e2e

fix(embed): implement robust EmbedPlayerModal and guard resetTorrentStats

2026-01-24 22:09:03 +00:00

feed-engine

Add explore feed engine tests and docs

2026-01-22 19:36:31 -05:00

helpers

fix(test): resolve moderation-overrides flakiness and clean artifacts

2026-01-28 15:40:12 +00:00

moderation

fix: ensure access control lists are loaded before playback

2026-01-23 04:39:18 +00:00

nostr

test: add comprehensive tests for utilities, auth, and relay systems

2026-02-04 17:28:28 +00:00

services

test: add comprehensive tests for utilities, auth, and relay systems

2026-02-04 17:28:28 +00:00

state

test(ai): fix sessionActor tests and enhance profileCache coverage

2026-01-26 11:35:18 +00:00

test-helpers

chore(ai): CI health fixes (flaky tests)

2026-01-27 02:59:39 +00:00

torrent

Handle WebTorrent fallback without service worker

2025-10-15 14:54:24 -04:00

ui

Merge pull request #1846 from PR0M3TH3AN/fix-upload-modal-test-failures-9576410255273740995

2026-01-27 16:28:53 -05:00

unit

Refactor docs navigation and clean up legacy views

2026-01-27 16:32:01 +00:00

utils

🧹 Centralize SimpleEventEmitter class

2026-02-08 03:08:07 +00:00

visual

fix(test): stabilize mobile sidebar visual regression test

2026-01-28 16:25:28 +00:00

watchHistory

Remove metadata storage and handling from watch history

2026-01-05 16:58:59 +00:00

admin-list-store.test.mjs

fix(admin): exclude whitelisted users from blacklist in admin state and fix unit tests

2026-01-27 18:02:01 +00:00

app-batch-fetch-profiles.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00

app-state.test.mjs

test(ai): add unit tests for storageService and appState (agent)

2026-01-24 11:44:16 +00:00

auth-service.test.mjs

Enforce lockdown restrictions on login

2025-10-20 15:38:29 -04:00

benchmark-dm-db.mjs

perf: implement IndexedDB connection pooling in dmDb.js

2026-02-08 03:09:14 +00:00

comment-event-builder.test.mjs

Fix CI, environment, linting, and unit test issues

2026-01-13 20:32:06 +00:00

comment-thread-service.test.mjs

chore(ai): CI health fixes (flaky tests)

2026-01-18 02:39:42 +00:00

design-system-metrics.test.mjs

Refactor floating panel and metrics styling

2025-10-14 13:31:22 -04:00

discussion-count-service.test.mjs

Use uppercase tags for comment events

2026-01-06 16:22:49 -05:00

dm-db.test.mjs

fix(storage): resolve db connection leaks and patch test environment

2026-01-19 16:24:07 +00:00

dm-decryptor.test.mjs

Fix DM decryptor to try recipient keys for outgoing messages

2025-10-26 19:23:40 -04:00

dm-normalization.test.mjs

chore(ai): CI health fixes (flaky tests)

2026-01-20 12:39:19 +00:00

edit-modal-submit-state.test.mjs

security: fix magnet parameter injection and data loss

2026-02-11 11:31:00 +00:00

embed_playback_check.spec.mjs

Fix embed player crash and prevent duplicate initialization

2026-01-24 21:42:37 +00:00

event-schemas.test.mjs

chore(ai): event schema validation tool + fixes

2026-01-23 05:33:57 +00:00

feed-engine.test.mjs

Hydrate feed timestamps before sorting

2025-10-26 12:05:03 -04:00

hashtag-preferences.test.mjs

feat(services): add window.nostr fallback for hashtag preference decryption

2026-01-27 23:46:23 +00:00

lnurl.test.mjs

test: add comprehensive payment system tests (lnurl, platformFee, zapReceipts, zapRequests)

2026-02-05 14:50:41 +00:00

login-modal-controller.test.mjs

chore(ai): CI health fixes (flaky tests)

2026-01-23 02:36:40 +00:00

magnet-utils.test.mjs

chore(ai): remove dead code (magnet.js and unused exports)

2026-01-22 20:29:07 +00:00

media-loader.test.mjs

Remove dynamic style system and tighten inline style checks

2025-10-14 08:48:17 -04:00

modal-accessibility.test.mjs

Fix CI, environment, linting, and unit test issues

2026-01-13 20:32:06 +00:00

moderation-service.test.mjs

chore(ai): CI health fixes (flaky tests)

2026-01-19 03:02:23 +00:00

moderation-stage.test.mjs

Fix viewer mute blur regression and update modal overrides

2025-10-26 16:06:40 -04:00

more-menu-controller.test.mjs

Refresh all video grids after moderation updates

2025-10-20 13:17:00 -04:00

nip71-base-event-tags.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00

nip71-builder.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00

nip71-form-manager.test.mjs

Sanitize NIP-71 hashtag inputs

2025-10-08 16:39:30 -04:00

nostr-boost-actions.test.mjs

Serialize repost targets when available

2025-11-03 14:35:43 -05:00

nostr-count-fallback.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00

nostr-delete-flow.test.mjs

chore(ai): doc js/nostr/client.js (agent)

2026-01-19 15:18:36 +00:00

nostr-ephemeral-dm-tester.html

Update nostr-tools bundle to restore nip46 handshake

2025-10-22 07:18:25 -04:00

nostr-login-permissions.test.mjs

fix(test): resolve ReferenceError in nostr login permissions test

2026-01-31 19:16:04 +00:00

nostr-nip46-queue.test.mjs

test(ai): add unit tests for nip46Queue and moderationActionController (agent)

2026-01-27 11:54:02 +00:00

nostr-private-key-signer.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00

nostr-publish-rejection.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00

nostr-rebroadcast-guard.test.mjs

Refactor nostr publish helpers into shared module

2025-10-22 15:48:59 -04:00

nostr-send-direct-message.test.mjs

chore(ai): CI health fixes (flaky tests)

2026-01-21 02:42:52 +00:00

nostr-service-access-control.test.mjs

fix(test): stub moderation timers in access control test to prevent hang

2026-01-27 04:32:00 +00:00

nostr-signer-race.test.mjs

fix(nostr): prevent nip-07 fallback from overwriting concurrent login

2026-01-26 21:19:47 +00:00

nostr-view-event-bindings.test.mjs

Add nostr facades for client, view events, and watch history

2025-10-22 22:17:30 -04:00

nostr-view-events.test.mjs

Remove legacy view filter flag

2026-01-06 15:36:37 -05:00

nwc-client.test.mjs

Add wallet budget enforcement for NWC payments

2025-10-29 06:52:30 -04:00

nwc-settings-service.test.mjs

Add per-profile settings store and mask wallet inputs

2025-10-21 17:46:41 -04:00

platform-fee.test.mjs

test: add comprehensive payment system tests (lnurl, platformFee, zapReceipts, zapRequests)

2026-02-05 14:50:41 +00:00

position-floating-panel.test.mjs

Fix unit tests: Expose HTMLStyleElement in JSDOM setup

2026-01-14 03:52:53 +00:00

profile-modal-controller.test.mjs

Fix: Ensure history pane refreshes on subsequent visits

2026-01-14 04:05:23 +00:00

reaction-event-builder.test.mjs

Include event pointer tags for reactions

2025-10-29 22:14:20 -04:00

relay-manager.test.mjs

test: add comprehensive tests for utilities, auth, and relay systems

2026-02-04 17:28:28 +00:00

revert-modal-controller.test.mjs

refactor(ai): extract handleRevertVideo from js/app.js (agent)

2026-01-27 03:20:08 +00:00

safe-decode.test.mjs

refactor: centralize safe decode helpers

2025-10-02 12:48:24 -04:00

share-event-builder.test.mjs

Document and test share note events

2026-01-22 22:50:00 -05:00

shareNostrController.test.mjs

refactor(ai): extract ShareNostrController from js/app.js (agent)

2026-01-25 03:34:10 +00:00

storage-service.test.mjs

Fix: Enforce single default storage connection

2026-01-25 17:40:16 +00:00

subscriptions-feed.test.mjs

Normalize subscription authors to fix empty feed

2025-10-20 21:15:47 -04:00

subscriptions-manager.test.mjs

Improve relay selection and fault tolerance for list fetching

2026-01-27 22:54:31 +00:00

test-setup.mjs

test: fix video modal tests and add missing polyfills

2026-01-27 02:09:22 +00:00

user-blocks.test.mjs

refactor: update user block fetch logic to prioritize kind 10000 with d-tag

2026-01-27 23:59:58 +00:00

validate-config.test.mjs

chore: adopt gpl licensing and lowercase bitvid

2025-10-10 12:56:46 -04:00

video-card-source-visibility.test.mjs

Stop closing menus from refocusing unrelated cards

2025-10-16 16:43:58 -04:00

video-modal-accessibility.test.mjs

Fix CI failures in popover engine, tag trimming, and canvas mock

2026-01-27 03:46:40 +00:00

video-modal-comments.test.mjs

test(infra): mock web APIs for JSDOM and fix comments test assertions

2026-01-27 02:04:04 +00:00

video-modal-controllers.test.mjs

test: update VideoModal tag expectations to include hash prefix

2026-01-27 03:54:41 +00:00

video-modal-moderation.test.mjs

test: fix video modal tests and add missing polyfills

2026-01-27 02:09:22 +00:00

video-modal-tags.test.mjs

Add VideoModal tag rendering tests

2025-10-23 13:43:05 -04:00

video-modal-zap.test.mjs

fix(test): resolve ReferenceError in nostr login permissions test

2026-01-31 19:16:04 +00:00

video-note-payload.test.mjs

security: fix magnet parameter injection and data loss

2026-02-11 11:41:17 +00:00

video-schema-and-conversion.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00

view-counter.test.mjs

Ensure view counts are monotonic during hydration

2026-01-07 00:43:18 +00:00

watch-history-feed.test.mjs

Add watch history feed adapter and update renderer

2025-10-04 17:25:43 -04:00

watch-history.test.mjs

chore(ai): CI health fixes (flaky tests)

2026-01-28 02:26:05 +00:00

zap-receipt-validator.test.mjs

test: add comprehensive payment system tests (lnurl, platformFee, zapReceipts, zapRequests)

2026-02-05 14:50:41 +00:00

zap-requests.test.mjs

test: add comprehensive payment system tests (lnurl, platformFee, zapReceipts, zapRequests)

2026-02-05 14:50:41 +00:00

zap-shared-state.test.mjs

Fix zap fee parsing for split calculations

2025-10-05 22:03:07 -04:00

zap-split.test.mjs

Remove nostr shim and retarget imports

2026-01-06 15:32:21 -05:00