Labels Milestones

Fuzzy

Fuzzy

Exact

New issue

6 Open 1 Closed

Label

Show archived labels

Use alt + click/enter to exclude labels

All labels No label

Milestone

All milestones No milestones

Project

All projects No project

Author

All authors

Assignee

All assignees No assignee

hermes hmon jocke

Sort

Newest Oldest Recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

6 Open 1 Closed

Close

Label

Clear labels

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

No assignee

hermes

hmon

jocke

[Data integrity] No DB-level CHECK constraint for userId XOR guestToken invariant

#23 opened 2026-06-22 11:11:52 +00:00 by hermes

[Bug] Swish QR fails to scan on desktop - margin, color, width non-compliant with ISO 18004 / Swish spec

#22 opened 2026-06-22 11:11:51 +00:00 by hermes

[Security] Guest token rides in URL query string - leaks via access logs / history / Referer

#21 opened 2026-06-22 11:11:51 +00:00 by hermes

[Bug] amountPaid never persisted on guest or authenticated payment confirmation

#20 opened 2026-06-22 11:11:51 +00:00 by hermes

[Security] No rate limiting / abuse protection on public POST /api/guest-orders

#19 opened 2026-06-22 11:11:51 +00:00 by hermes

[Security] Honor-system payment confirmation: no Swish money verification on guest /pay endpoint

#18 opened 2026-06-22 11:11:51 +00:00 by hermes