google-labs-jules[bot]andPR0M3TH3AN be66e39ee5 security: fix magnet parameter injection and data loss ...

- Fix magnet parameter injection vulnerability in `js/magnetShared.js` by ensuring all parameter values are decoded during normalization and re-encoded during URI construction.
- Fix a data loss bug in `normalizeMagnetInput` where parameter values containing `=` were truncated due to `split("=", 2)`.
- Consistently decode all magnet parameter values to ensure a clean internal representation.
- Use `encodeURIComponent` in `buildMagnetUri` to safely reconstruct the magnet URI.

Co-authored-by: PR0M3TH3AN <[email protected]>

2026-02-11 11:23:28 +00:00

..

attachments

Add DM attachment upload and preview flow

2026-01-19 12:51:34 -05:00

auth

fix(nostr): serialize nip-07 requests to prevent extension timeouts and crashes

2026-01-28 14:35:56 +00:00

designSystem

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

dom

refactor: migrate console usage to shared loggers

2025-10-15 14:37:25 -04:00

feedEngine

perf: optimize MMR sort complexity from O(N^3) to O(N^2)

2026-02-05 19:17:16 +00:00

nostr

fix(nip46): ensure validator integration works correctly in connectRemoteSigner

2026-02-07 13:39:08 +00:00

payments

feat: parallelize zap retry execution

2026-01-31 19:10:00 +00:00

search

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

services

🧹 Centralize SimpleEventEmitter class

2026-02-08 03:08:07 +00:00

state

perf: optimize ProfileCache.clearMemoryCache to O(1)

2026-02-05 19:18:36 +00:00

storage

perf: implement IndexedDB connection pooling in dmDb.js

2026-02-08 03:09:14 +00:00

ui

fix(test): resolve ReferenceError in nostr login permissions test

2026-01-31 19:16:04 +00:00

utils

🧹 Centralize SimpleEventEmitter class

2026-02-08 03:08:07 +00:00

accessControl.js

fix: ensure access control lists are loaded before playback

2026-01-23 04:39:18 +00:00

adminListStore.js

fix(admin): exclude whitelisted users from blacklist in admin state and fix unit tests

2026-01-27 18:02:01 +00:00

app.js

Merge pull request #2167 from PR0M3TH3AN/cleanup-unused-imports-app-js-3515244250419600634

2026-02-07 09:25:16 -05:00

applicationContext.js

Refactor app orchestrator into Application with dependency injection

2025-10-03 21:10:22 -04:00

bootstrap.js

Add S3 storage option to upload modal

2026-01-24 20:00:00 -05:00

bufferPolyfill.js

fix: switch to jsdelivr for external modules

2026-01-07 17:30:22 +00:00

channelProfile.js

perf: implement IndexedDB connection pooling and fix channel profile regression

2026-02-08 03:49:12 +00:00

config.js

chore(ai): add automated PR review report

2026-01-28 23:49:33 +00:00

constants.js

feat(playback): add configurable timeout for initial playback start

2026-01-26 15:55:11 +00:00

designSystem.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

directMessagesStore.js

fix(test): resolve DM flow test timeouts and hangs

2026-01-27 02:42:31 +00:00

disclaimer.js

chore(ai): format sources and fix moderation bugs (agent)

2026-01-22 14:58:35 +00:00

dmDecryptor.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

docsView.js

Refactor Docs ScrollSpy to use IntersectionObserver and fix dist/src mismatch

2026-02-05 21:21:40 +00:00

embed.js

fix(embed): video sizing letterbox and logo accent

2026-01-24 23:57:29 +00:00

embedDiagnostics.js

Debug: forward embed logs to parent when embed_debug=1

2026-01-24 22:29:18 +00:00

exploreView.js

Add explore view empty state and info popover

2026-01-22 19:27:40 -05:00

forYouView.js

feat: add info icon with filter logic popover to For You feed

2026-01-21 17:48:01 +00:00

gridHealth.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

hashChangeHandler.js

Refactor docs navigation and clean up legacy views

2026-01-27 16:32:01 +00:00

hashView.js

Fix: Preserve ?v= parameter when auto-redirecting to For You feed

2026-01-23 04:19:40 +00:00

historyView.js

chore(ai): remove dead code (agent)

2026-01-27 20:33:25 +00:00

index.js

Add S3 storage option to upload modal

2026-01-24 20:00:00 -05:00

kidsView.js

Add kids feed view

2026-01-23 02:09:08 -05:00

lists.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

magnets.js

Add btih extraction helper

2026-01-26 21:49:18 -05:00

magnetShared.js

security: fix magnet parameter injection and data loss

2026-02-11 11:23:28 +00:00

magnetUtils.js

Add btih extraction helper

2026-01-26 21:49:18 -05:00

nostrClientFacade.js

chore(ai): add automated PR review report

2026-01-28 23:49:33 +00:00

nostrClientRegistry.js

chore(ai): add automated PR review report

2026-01-28 23:49:33 +00:00

nostrEventSchemas.js

feat: add fuzz testing harnesses and fix crash in nostrEventSchemas

2026-01-28 16:27:36 +00:00

nostrPublish.js

refactor: migrate console usage to shared loggers

2025-10-15 14:37:25 -04:00

nostrToolsBootstrap.js

Fix nostr-tools bootstrapping, UploadModal zombie callbacks, and service error handling

2026-01-27 03:15:32 +00:00

nostrViewEventsFacade.js

Add nostr facades for client, view events, and watch history

2025-10-22 22:17:30 -04:00

nostrWatchHistoryFacade.js

Add nostr facades for client, view events, and watch history

2025-10-22 22:17:30 -04:00

nwcSettings.js

refactor: migrate console usage to shared loggers

2025-10-15 14:37:25 -04:00

playbackUtils.js

Document torrent playback normalization details

2025-09-24 15:23:24 -04:00

r2.js

Refactor R2 key prefix for deterministic identifiers

2026-01-26 12:47:05 -05:00

reactionCounter.js

I've removed unused exports and functions to improve codebase cleanliness:

2026-01-19 20:46:47 +00:00

relayManager.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

searchView.js

chore(ai): remove dead code (agent)

2026-01-23 20:33:06 +00:00

sidebar.js

Remove IPNS support and related content

2026-01-19 02:13:59 +00:00

sidebarLoading.js

Align sidebar loading indicators and history heading

2025-10-01 13:42:50 -04:00

subscriptions.js

chore(ai): add automated PR review report

2026-01-28 23:49:33 +00:00

themeController.js

chore(ai): remove dead code (unused exports & deps)

2026-01-24 20:28:53 +00:00

trackerConfig.js

chore(ai): remove dead code (agent)

2026-01-27 20:33:25 +00:00

urlHealthObserver.js

I've removed unused exports and functions to improve codebase cleanliness:

2026-01-19 20:46:47 +00:00

userBlocks.js

chore(ai): add automated PR review report

2026-01-28 23:49:33 +00:00

videoEventUtils.js

I've removed unused exports and functions to improve codebase cleanliness:

2026-01-19 20:46:47 +00:00

viewCounter.js

Preserve cached view totals when hydration fails

2026-01-09 19:34:39 -05:00

viewManager.js

Register docs view initializer

2026-01-27 08:36:12 -05:00

watchHistoryDebug.js

refactor: migrate console usage to shared loggers

2025-10-15 14:37:25 -04:00

watchHistoryService.js

improve watch history reliability

2026-01-21 22:07:23 +00:00

webtorrent-global.js

Ensure Beacon loads WebTorrent module

2025-10-15 12:49:46 -04:00

webtorrent.js

fix(core): optimize moderation subscriptions and reduce log noise (agent)

2026-01-26 23:40:59 +00:00

webtorrent.min.js

updated directory structure to fix root Service Worker issues and performance improvements

2025-02-05 16:54:40 -05:00

webtorrent.min.js.map

updated directory structure to fix root Service Worker issues and performance improvements

2025-02-05 16:54:40 -05:00