google-labs-jules[bot]andPR0M3TH3AN 2f78bc6632 Fix Open Redirect and XSS via NIP-46 Authentication URL ...

- Validated `pendingAuthUrl` protocol to be `http:` or `https:` in `js/ui/loginModalController.js`.
- Logged warning if unsafe URL is encountered.

Signed-off-by: Jules <[email protected]>

Co-authored-by: PR0M3TH3AN <[email protected]>

2026-02-07 23:13:31 +00:00

..

components

refactor: deduplicate HEX64_REGEX to js/utils/hex.js

2026-02-07 21:52:51 +00:00

dm

Refactor DM settings into a dedicated modal

2026-02-02 19:43:06 +00:00

overlay

Fix CI failures in popover engine, tag trimming, and canvas mock

2026-01-27 03:46:40 +00:00

views

Improve relay hygiene and count status

2026-01-29 09:58:35 -05:00

ambientBackground.js

perf: optimize critical rendering and data processing paths

2026-01-30 15:27:25 +00:00

appChromeController.js

Add unread DM badge to profile button

2026-01-19 14:57:10 -05:00

applicationBootstrap.js

fix: apply block/mute list filtering to DM messages and conversations

2026-02-06 19:41:50 +00:00

editModalController.js

refactor(ai): extract EditModalController from js/app.js (agent)

2026-01-26 03:21:44 +00:00

engagementController.js

refactor(ai): extract EngagementController from js/app.js (agent)

2026-01-22 03:36:33 +00:00

initDeleteModal.js

Refactor modal initialization into dedicated helpers

2025-10-22 22:13:23 -04:00

initEditModal.js

Refactor modal initialization into dedicated helpers

2025-10-22 22:13:23 -04:00

initUploadModal.js

Add S3 storage option to upload modal

2026-01-24 20:00:00 -05:00

loginModalController.js

Fix Open Redirect and XSS via NIP-46 Authentication URL

2026-02-07 23:13:31 +00:00

ModalManager.js

test: fix video modal tests and add missing polyfills

2026-01-27 02:09:22 +00:00

moderationCopy.js

chore(ai): remove dead code (agent)

2026-01-29 20:29:42 +00:00

moderationUiHelpers.js

Add restore-default moderation control

2025-10-26 11:13:37 -04:00

moreMenuController.js

Migrate user blocks to standard NIP-51 Mute List

2026-02-01 21:47:29 +00:00

notificationController.js

refactor(ai): extract notification logic from js/app.js (agent)

2026-02-01 03:08:05 +00:00

profileIdentityController.js

Refactor UI responsibilities into controllers

2025-10-26 16:28:41 -04:00

profileModalController.js

fix: apply block/mute list filtering to DM messages and conversations

2026-02-06 19:41:50 +00:00

reactionController.js

refactor(ai): extract reaction logic from js/app.js (agent)

2026-01-24 03:21:14 +00:00

revertModalController.js

refactor(ai): extract handleRevertVideo from js/app.js (agent)

2026-01-27 03:20:08 +00:00

shareNostrController.js

refactor(ai): extract ShareNostrController from js/app.js (agent)

2026-01-25 03:34:10 +00:00

similarContentController.js

fix(ui): resolve test failures and lint errors

2026-01-20 12:32:16 +00:00

subscriptionHistoryController.js

Add subscription history and backup/restore functionality

2026-02-02 03:05:13 +00:00

tagPreferenceMenuController.js

fix: ensure active feed refreshes when hashtag preferences change

2026-02-03 01:55:21 +00:00

torrentStatusController.js

Throttle torrent status updates and logging

2026-01-30 09:30:55 -05:00

urlHealthController.js

perf: optimize critical rendering and data processing paths

2026-01-30 15:27:25 +00:00

videoListViewController.js

Tier login hydration and trim DM fetch

2026-01-29 15:43:34 -05:00

videoModalCommentController.js

Rebuild comment tree on append

2026-01-06 22:30:23 -05:00

videoModalController.js

refactor(ai): extract VideoModalController from js/app.js (agent)

2026-01-30 03:40:36 +00:00

videoSettingsMenuController.js

refactor(ai): extract videoSettingsMenuController from js/app.js (agent)

2026-01-29 03:19:06 +00:00

watchHistoryController.js

Refactor watch history helpers to new module

2025-10-22 14:08:47 -04:00

zapController.js

I have updated the zap dialog to display the "Done" button on success.

2026-01-18 01:58:56 +00:00