-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Every plugin gets unrestricted access to the full host DbContext and HttpContext
enhancementNew feature or requestNew feature or requestStatus: Open.#247 In schulydev/SchulyBackend;Unscoped IPluginVaultFactory lets any plugin decrypt any other plugin's (or the host's) vault secrets
bugSomething isn't workingSomething isn't workingStatus: Open.#246 In schulydev/SchulyBackend;Plugins share one Postgres superuser — any plugin can read/write another plugin's or the host's data
bugSomething isn't workingSomething isn't workingStatus: Open.#245 In schulydev/SchulyBackend;Student document uploads have no content-type/extension allowlist
bugSomething isn't workingSomething isn't workingStatus: Open.#244 In schulydev/SchulyBackend;JWT bearer validation skips audience check on the production Keycloak path
bugSomething isn't workingSomething isn't workingStatus: Open.#243 In schulydev/SchulyBackend;The self-hosting steps put a real S3 secret into a tracked file
bugSomething isn't workingSomething isn't workingStatus: Open.#235 In schulydev/SchulyBackend;Plugin event dispatch races the request scope and silently drops events
bugSomething isn't workingSomething isn't workingStatus: Open.#234 In schulydev/SchulyBackend;Replace the hand-rolled plugin task scheduler with TickerQ
enhancementNew feature or requestNew feature or requestStatus: Open.#233 In schulydev/SchulyBackend;Runtime plugin install loads DLLs with no integrity (hash/signature) verification
enhancementNew feature or requestNew feature or requestStatus: Open.#206 In schulydev/SchulyBackend;- Status: Open.#140 In schulydev/SchulyBackend;
- Status: Open.#79 In schulydev/SchulyBackend;