to be fixed in v2.1.0-beta
-v2 sillydev bugs 67.220.85.146:6110
- [ ] “Failed to copy script” inside of script.html, both in script viewer and inside of cta button
- [ ] “Copy script” button on home page does not function correctly
- [ ] CORS error fetching WEAO API on the Executors page (50/50 problem, happens to some)
- [ ] Change Roblox version status on Executors page to use https://clientsettings.roblox.com/v2/client-version/MacPlayer and https://clientsettings.roblox.com/v2/client-version/WindowsPlayer instead of WEAO api
- [ ] Editor preferences do not persist in the Upload page nor script.html page
- [ ] Page Title | Kyvorn on index.html
- [ ] Upload to Kyvorn inside of Kyvorn Editor is very buggy
- [ ] change timestamps for posts to UTC isntead of whatever the stupid fucking shit they are
- [ ] report button on index.html cards does literally nothing
- [ ] shows title instead of username
- [ ] instead of showing the title in the username spot, make it bolded before the slug description
- [ ] Not a singular rate limit is put in place at all
vulns
- [ ] Implement robust server-side input validation for all API endpoints
- [ ] Fix security issue: plaintext password storage in server/index.js
- [ ] Add rate limiting to sensitive endpoints (auth, script upload, etc.)
- [ ] Sanitize user content to prevent XSS vulnerabilities
- [ ] Implement CSRF protection for all state-changing endpoints