4grayandClaude Opus 5.5 b1045824ca test(perf): stop echoing the request URL from the ledger spec's upstream ...

CodeQL flagged the fake upstream as reflected XSS. It now records what it
received server-side and answers with a fixed text/plain body.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-29 08:58:36 +02:00

..

fixtures

fix(migration): preserve and recover legacy desktop sources (#1550)

2026-09-06 00:45:35 +02:00

journeys

test(perf): add the J2 open-source journey

2026-09-29 08:58:36 +02:00

performance

test(perf): stop echoing the request URL from the ledger spec's upstream

2026-09-29 08:58:36 +02:00

backup-roundtrip.e2e.ts

test(e2e): read sidebar categories in one snapshot inside polls (#1728)

2026-09-27 20:55:58 +02:00

catalog-sorting.e2e.ts

fix(ui): keep one Back arrow on detail pages (#1627)

2026-09-19 10:44:17 +02:00

category-management.e2e.ts

test(e2e): read sidebar categories in one snapshot inside polls (#1728)

2026-09-27 20:55:58 +02:00

dash-clearkey.e2e.ts

feat(playback): record recently viewed only after the stream plays (#1732)

2026-09-28 14:23:06 +02:00

dashboard-activation.e2e.ts

feat(playback): record recently viewed only after the stream plays (#1732)

2026-09-28 14:23:06 +02:00

data-dir-reaper.e2e.ts

fix(e2e): reap data directories abandoned by earlier runs (#1296)

2026-07-28 09:41:24 +02:00

data-dir-reaper.ts

fix(e2e): reap data directories abandoned by earlier runs (#1296)

2026-07-28 09:41:24 +02:00

database-worker-post-gc.e2e.ts

fix(perf): finalize exact worker capture safely

2026-07-27 02:15:59 +02:00

download-reliability.e2e.ts

fix(downloads): reconnect interrupted transfers and resume without validators (#1446)

2026-08-16 07:07:25 +02:00

downloads.e2e-support.ts

fix(downloads): reconnect interrupted transfers and resume without validators (#1446)

2026-08-16 07:07:25 +02:00

downloads.e2e.ts

feat(downloads): align manager cards, queue rows, and headings with the rail design language (#1448)

2026-08-15 13:59:28 +02:00

electron-process-lifecycle.ts

test(electron): fix Windows cleanup and retain packaged smoke diagnostics (#1665)

2026-09-23 22:55:48 +02:00

electron-process-termination.ts

test(electron): fix Windows cleanup and retain packaged smoke diagnostics (#1665)

2026-09-23 22:55:48 +02:00

electron-test-fixtures.ts

test(performance): add the J1 launch-to-usable journey benchmark (#1698)

2026-09-26 19:18:19 +02:00

embedded-mpv-frame-copy-packaged-filesystem.tests.ts

feat(packaging): ship Linux embedded MPV frame-copy runtime (#1200)

2026-07-18 17:28:22 +02:00

embedded-mpv-frame-copy-packaged-filesystem.ts

feat(packaging): ship Linux embedded MPV frame-copy runtime (#1200)

2026-07-18 17:28:22 +02:00

embedded-mpv-frame-copy-packaged-fixtures.spec.ts

feat(playback): stream-info popover in the player overlay (#1578)

2026-09-10 21:33:41 +02:00

embedded-mpv-frame-copy-packaged-fixtures.ts

feat(playback): stream-info popover in the player overlay (#1578)

2026-09-10 21:33:41 +02:00

embedded-mpv-frame-copy-packaged.e2e.ts

feat(playback): stream-info popover in the player overlay (#1578)

2026-09-10 21:33:41 +02:00

epg-guide.e2e.ts

feat(epg): rebuild the programme guide for M3U playlists (#1560)

2026-09-06 18:47:25 +02:00

epg-timeline-interaction.e2e.ts

feat(epg): compact timeline toolbar with icon-only Now and cycling zoom (#1557)

2026-09-06 10:34:28 +02:00

epg.e2e.ts

fix(dashboard): live rails find XMLTV programmes outside the global EPG sources (#1637)

2026-09-20 21:48:55 +02:00

favorites.e2e.ts

fix(ui): keep one Back arrow on detail pages (#1627)

2026-09-19 10:44:17 +02:00

file-import.e2e.ts

feat(packaging): register IPTVnator as the .m3u/.m3u8 handler (#1301)

2026-07-28 21:53:43 +02:00

legacy-playlist-migration.e2e.ts

test(electron): fix Windows cleanup and retain packaged smoke diagnostics (#1665)

2026-09-23 22:55:48 +02:00

legacy-profile-fixture.ts

fix(migration): preserve and recover legacy desktop sources (#1550)

2026-09-06 00:45:35 +02:00

live-sidebar-collapse.e2e.ts

feat(playback): record recently viewed only after the stream plays (#1732)

2026-09-28 14:23:06 +02:00

m3u-import.performance.ts

test(performance): add formal M3U import benchmark (#1287)

2026-07-27 10:34:22 +02:00

m3u-refresh-cancellation.performance.ts

perf(m3u): stop cancelled refresh workers (#1268)

2026-07-26 09:25:51 +02:00

picture-in-picture.e2e.ts

fix(playback): close legacy picture-in-picture on video replacement (#1538)

2026-09-05 14:02:55 +02:00

playable-stream-fixture.ts

feat(playback): record recently viewed only after the stream plays (#1732)

2026-09-28 14:23:06 +02:00

player-theme.e2e.ts

feat(playback): record recently viewed only after the stream plays (#1732)

2026-09-28 14:23:06 +02:00

playlist-auto-refresh.e2e.ts

fix: prevent fullscreen hover and playlist refresh races (#1591)

2026-09-12 21:11:11 +02:00

playlist-refresh-write-gate.ts

fix: prevent fullscreen hover and playlist refresh races (#1591)

2026-09-12 21:11:11 +02:00

playlist-switcher.e2e.ts

feat(playback): record recently viewed only after the stream plays (#1732)

2026-09-28 14:23:06 +02:00

portal-mock-fixtures.ts

fix(ui): preserve EPG in narrow channel rows (#1312)

2026-07-31 08:27:36 +02:00

providers.e2e.ts

fix(xtream): improve sync overlay contrast in both themes (#1546)

2026-09-06 00:44:08 +02:00

recent.e2e.ts

feat(playback): record recently viewed only after the stream plays (#1732)

2026-09-28 14:23:06 +02:00

remote-control.e2e.ts

feat(portals): fold live TV panels in nested levels with a category dropdown (#1556)

2026-09-06 14:42:59 +02:00

renderer-reload.e2e.ts

fix(shell): reload the packaged renderer back onto its in-app route (#1622)

2026-09-19 08:43:43 +02:00

renderer-reload.support.ts

fix(shell): reload the packaged renderer back onto its in-app route (#1622)

2026-09-19 08:43:43 +02:00

search.e2e.ts

fix(ui): keep one Back arrow on detail pages (#1627)

2026-09-19 10:44:17 +02:00

season-watched-toggle.e2e.ts

feat(dashboard): detail-first Continue Watching cards with quick actions (#1469)

2026-08-23 08:06:46 +02:00

series-download-queue.e2e.ts

feat(downloads): queue season episode downloads (#1357)

2026-08-03 08:53:44 +02:00

settings-connectivity-guard.e2e.ts

feat(portals): make connection cooldown configurable in desktop settings (#1536)

2026-09-05 11:18:05 +02:00

settings.e2e.ts

test(e2e): scope the dashboard rail link check to the workspace rail (#1746)

2026-09-29 07:01:46 +02:00

sidebar-categories.e2e-support.ts

test(e2e): read sidebar categories in one snapshot inside polls (#1728)

2026-09-27 20:55:58 +02:00

smoke.e2e.ts

[codex] Add scoped coverage reporting (#1024)

2026-06-06 17:41:40 +02:00

sources.e2e.ts

feat(playlist): clean up selected inactive desktop sources (#1593) (#1596)

2026-09-13 10:39:14 +02:00

stalker-playback-headers.e2e.ts

fix(stalker): keep live search within the selected category (#1552)

2026-09-06 09:05:21 +02:00

stalker-portal-discovery.e2e.ts

feat(stalker): discover portal endpoints on add and edit (#1391)

2026-08-09 22:34:49 +02:00

stream-info.e2e.ts

feat(playback): stream-info popover in the player overlay (#1578)

2026-09-10 21:33:41 +02:00

theme-contrast.ts

fix(playback): apply themes to player and EPG panels (#1541)

2026-09-05 15:32:22 +02:00

vod-multi-source.e2e.ts

feat(portals): rework the VOD sources popup and action row (#1359)

2026-08-02 22:27:24 +02:00

window-controls.e2e.ts

fix(window-controls): derive window-state pushes from events so controls reappear after fullscreen (#1178)

2026-07-26 01:49:08 +02:00

window-zoom-level.e2e.ts

feat(shell): zoom shortcuts on Windows and Linux (#1109) (#1623)

2026-09-19 10:47:32 +02:00

xtream-catchup-timezone.e2e.ts

fix: prevent fullscreen hover and playlist refresh races (#1591)

2026-09-12 21:11:11 +02:00

xtream-epg.e2e.ts

feat(epg): accept local XMLTV files as EPG sources (#1600)

2026-09-13 21:04:41 +02:00

xtream-live-format.e2e.ts

fix(xtream): try advertised TS after initial web HLS HTTP failure (#1558)

2026-09-06 11:00:09 +02:00

xtream-live-format.fixture.ts

fix(xtream): try advertised TS after initial web HLS HTTP failure (#1558)

2026-09-06 11:00:09 +02:00

xtream-responsiveness.e2e.ts

fix(ui): restore channel and detail keyboard scrolling (#1542)

2026-09-05 15:02:57 +02:00

xtream-vod-details.e2e.ts

fix(xtream): detect HTTP portals during explicit connection tests (#1588)

2026-09-12 15:30:22 +02:00

xtream.performance.ts

test(performance): add end-to-end Xtream benchmark harness (#1300)

2026-07-28 08:08:07 +02:00