Search results

Bug: Missing validation on Feedback.path (DB requires NOT NULL but model doesn't validate)

Status: Open.

#49 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Accessibility: Missing alt attributes and aria labels on images and forms

Status: Open.

#48 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Security: hCaptcha keys can be nil in production, silently disabling captcha

Status: Open.

#47 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Bug: Weak authorization in enforce_admin raises bare exception

Status: Open.

#46 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Performance: domains.map(&:destroy) instead of destroy_all in SetupController

Status: Open.

#45 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Performance: EnqueueAnalyticsSummaryEmailsJob processes all accounts unnecessarily

Status: Open.

#44 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Bug: Hard-coded admin email in AdminMailer

Status: Open.

#43 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Security: No rate limiting on public subscription endpoint

Status: Open.

#42 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Performance: N+1 queries in Account domain iteration methods

Status: Open.

#41 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Performance: CSV import loads entire file into memory with no size limit

Status: Open.

#40 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Performance: Blocking I/O in request cycle (OG image generation, icon processing)

Status: Open.

#39 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026

Performance: pluck().uniq instead of distinct.pluck in VisitsInLastDayJob

Status: Open.

#38 In contraptionco/postcard;

· philipithomas opened on Feb 9, 2026