EventSnap

Files

fabi 91ff961850 fix(security): medium/low — event-lock, atomic config, a11y, diashow, hygiene

- social: likes/comments rejected on a closed event (e2e proven).
- admin: patch_config validates-then-writes atomically; char-based length.
- hashtag/comment models: atomic tag writes in edit + comment paths.
- Modal: inert the background (modal-inert action) for screen readers.
- sse.ts: idempotent visibilitychange listener (no duplicate reconnects).
- diashow: videos advance on `ended` (transitions + page wiring).
- docs/hygiene: README clone-case fix; removed stale committed .env.test and
  gitignored it; docker-compose.dev.yml tidy.

Left documented as accepted-risk per plan: PIN-persist-after-logout,
UUID-reachable hidden uploads, DECISION-media-auth.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-01 21:25:58 +02:00

__smoke

feat(e2e): Playwright suite — 134 tests across 9 spec areas + UA matrix

2026-05-16 19:37:11 +02:00

01-auth

test(e2e): update suite for shipped features + gate Chromium-only perms

2026-06-30 22:12:05 +02:00

02-upload

test(e2e): update suite for shipped features + gate Chromium-only perms

2026-06-30 22:12:05 +02:00

03-feed

test: cover grid filter OR/AND (extract pure fn + unit + real e2e)