Search results

[Feature][Medium] Fix engagement zone rotation stacking, modal lifecycle bugs, and outdated Rollup

enhancementNew feature or requestNew feature or request

priority:mediumMedium priorityMedium priority

Status: Open.

#97 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 25, 2026

[Security][High] XSS vulnerabilities in Wix integration examples via unsanitized innerHTML

priority:highHigh priorityHigh priority

securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardening

Status: Open.

#96 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 25, 2026

[NREM][Space] Add Nominatim geocoding cache and rate-limit protection for multi-widget pages

enhancementNew feature or requestNew feature or request

nremNREM Mode findingNREM Mode finding

nrem:improvementGeneral improvementGeneral improvement

nrem:spaceSpace-level nrem findingSpace-level nrem finding

Status: Open.

#95 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 24, 2026

[Feature][Medium] Add unit tests for untested modules: asset-service, interaction-tracker, media-viewer, utils

enhancementNew feature or requestNew feature or request

priority:mediumMedium priorityMedium priority

Status: Open.

#88 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 17, 2026

[Feature][Medium] Fix media-viewer component deficiencies: src change handling, error state, alt text, CORS fallback

enhancementNew feature or requestNew feature or request

priority:mediumMedium priorityMedium priority

Status: Open.

#87 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 17, 2026

[Security][Medium] Source maps always deployed to CDN, exposing original TypeScript source and embedded secrets

priority:mediumMedium priorityMedium priority

securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardening

Status: Open.

#86 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 17, 2026

[Security][Medium] Missing rel="noopener noreferrer" on all target="_blank" links enables tab-napping attacks

priority:mediumMedium priorityMedium priority

securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardening

Status: Open.

#85 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 17, 2026

[Feature] Resilient engagement zone image loading with graceful degradation

enhancementNew feature or requestNew feature or request

Status: Open.

#84 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 9, 2026

[Security] GitHub Actions workflows pin third-party actions by mutable version tags instead of commit SHAs

bugSomething isn't workingSomething isn't working

Status: Open.

#83 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 9, 2026

[Feature] Add runtime API response schema validation to prevent silent data corruption

Status: Open.

#82 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 7, 2026

[Security] Production release workflow publishes to NPM/S3 without running tests, risking untested code distribution

Status: Open.

#81 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 7, 2026

[Feature] Emit custom error events for host application observability

enhancementNew feature or requestNew feature or request

Status: Open.

#80 In numbersprotocol/capture-eye;

· numbers-official opened on Mar 5, 2026