sandrodachandClaude Opus 5.5 fcdf44a0ad docs: fresh review – new flaw list (FLAW-28 to 41) and feature ideas ...

The old list (FLAW-01 to 27) was done and is removed; references to it
in other documents are gone or replaced by the content. New findings
from a review after v0.5, among them a high one: javascript: links in
task notes run on click (Markdown viewer), which with the session in
localStorage allows taking over accounts through a shared task list.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 17:02:02 +01:00

..

rest.md

feat(backup): admin and account UI for server backups, import by section

2026-10-29 16:11:49 +01:00

websocket.md

docs: fresh review – new flaw list (FLAW-28 to 41) and feature ideas

2026-10-29 17:02:02 +01:00