Bohan Jiang ce52374d5d test(daemon): add cross-workspace regression for GetIssueGCCheck (#1143) ...

Adds TestGetIssueGCCheck_WithDaemonToken_CrossWorkspace alongside the
existing TestGetTaskStatus_WithDaemonToken_CrossWorkspace, covering:

- daemon token scoped to a different workspace → 404 (matches the
  "issue not found" status, so no UUID enumeration oracle)
- daemon token scoped to the issue's workspace → 200 with status and
  updated_at fields populated

Follow-up to #1121, which fixed the underlying IDOR reported in #1112
but did not ship a regression test. This gates the class of bug at CI
so the next handler to forget requireDaemonWorkspaceAccess will be
caught before merge.

2026-04-16 13:49:54 +08:00

..

auth

feat(auth): migrate auth token to HttpOnly Cookie & WebSocket Origin whitelist (#819)

2026-04-13 12:13:35 +08:00

cli

fix(cli): use .zip archive for Windows in multica update (#1075)

2026-04-15 17:16:36 +08:00

daemon

fix(daemon): normalize repo URL and clarify reposVersion intent (#1090)

2026-04-15 19:14:26 +08:00

events

feat(realtime): WS invalidation + refetch pattern, inbox bugfixes, UI polish

2026-03-29 13:49:40 +08:00

handler

test(daemon): add cross-workspace regression for GetIssueGCCheck (#1143)

2026-04-16 13:49:54 +08:00

logger

feat(desktop): daemon management panel with sidebar status bar (#952)

2026-04-14 19:12:39 +08:00

mention

feat(mentions): support @mentioning issues + server-side auto-expansion (#242)

2026-04-02 13:48:53 +08:00

middleware

Reapply "feat: workspace URL refactor v2 + rollback-safe compat layer (#1138)" (#1139) (#1141)

2026-04-16 13:16:35 +08:00

realtime

Reapply "feat: workspace URL refactor v2 + rollback-safe compat layer (#1138)" (#1139) (#1141)

2026-04-16 13:16:35 +08:00

sanitize

fix(sanitize): preserve code blocks and inline code from HTML entity escaping (#774)

2026-04-12 21:32:35 +08:00

service

fix(email): sanitize invitation Subject and lock behavior with tests (#1140)

2026-04-16 13:02:12 +08:00

storage

refactor(editor): remove hardcoded CDN domain, unify file card rendering

2026-04-15 10:43:36 +08:00

util

feat(mentions): support @mentioning issues + server-side auto-expansion (#242)

2026-04-02 13:48:53 +08:00