Skip to content

Fix code review audit issues and mobile UX improvements#69

Merged
alari76 merged 3 commits intomainfrom
fix/code-review-audit-fixes
Mar 9, 2026
Merged

Fix code review audit issues and mobile UX improvements#69
alari76 merged 3 commits intomainfrom
fix/code-review-audit-fixes

Conversation

@alari76
Copy link
Copy Markdown
Contributor

@alari76 alari76 commented Mar 9, 2026

Summary

  • Security & reliability fixes: From code review audit (session manager, upload routes, WS server, API client)
  • Prevent keyboard popup on mobile: Skip auto-focusing the input textarea when approval/permission prompts appear on mobile
  • Enlarge mobile tap targets: Increase prompt button padding from ~22px to ~34px on mobile for better usability

Test plan

  • Verify security fixes (session cleanup, upload validation, WS error handling)
  • Open on mobile — trigger a permission prompt, verify keyboard does NOT auto-appear
  • Verify prompt buttons are comfortably tappable on mobile
  • Verify desktop behavior is unchanged

🤖 Generated with Claude Code

alari76 and others added 2 commits March 9, 2026 18:54
- Move auth tokens from URL query params to Authorization headers (C1)
- Sanitize javascript: links in ChatView markdown rendering (C2)
- Add periodic cleanup for rate-limit wsConnections map (W1)
- Add .catch() handlers to checkAuthSession reconnect chains (W2)
- Add multer fileFilter to restrict uploads to image types (W3)
- Validate requestId format before echoing to stdin (W4)
- Clean up event listeners on Claude process restart (W5)
- Cap uploaded filename length to 64 chars (I1)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…gets

Skip auto-focusing the input textarea on mobile when prompts appear
(avoids disruptive keyboard popup for permission prompts). Increase
prompt button padding on mobile to ~34px height for better tap targets.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@alari76 alari76 changed the title Fix security and reliability issues from code review audit Fix code review audit issues and mobile UX improvements Mar 9, 2026
@alari76 alari76 merged commit 6700568 into main Mar 9, 2026
2 checks passed
@alari76 alari76 deleted the fix/code-review-audit-fixes branch March 10, 2026 05:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant