kolaente 2da89258e5 test: add failing test for task comment IDOR ... Proves that a user can read a comment from an inaccessible task by supplying an accessible task ID in the URL. Comment 18 belongs to task 34 (owned by user 13), but testuser1 can read it via task 1. Ref: GHSA-mr3j-p26x-72x4		2026-03-20 11:41:28 +00:00
..
_test.go.tpl	chore: rename API test suites (#938)	2025-06-13 08:23:17 +00:00
api_tokens_test.go	feat: add session-based auth with refresh token rotation	2026-02-25 10:30:25 +01:00
archived_test.go	fix: correct comments	2025-07-02 17:46:21 +02:00
caldav_test.go	fix(caldav): use /dav/projects/ as home to make iOS/MacOS reminders work (#2417)	2026-03-20 09:33:56 +00:00
error_responses_test.go	feat: add session-based auth with refresh token rotation	2026-02-25 10:30:25 +01:00
healthcheck_test.go	feat: introduce shared health check logic (#1073)	2025-07-02 21:01:41 +00:00
integrations.go	test: add tests for external team user discoverability bypass	2026-03-04 20:32:11 +01:00
kanban_test.go	refactor: centralize HTTP error handling (#2062)	2026-01-08 10:02:59 +00:00
label_task_test.go	test: add web tests for bulk label task endpoint	2026-03-10 23:58:44 +01:00
link_share_avatar_test.go	feat!: rename right to permission (#1277)	2025-08-13 11:05:05 +02:00
link_sharing_auth_test.go	chore: rename API test suites (#938)	2025-06-13 08:23:17 +00:00
link_sharing_test.go	refactor: centralize HTTP error handling (#2062)	2026-01-08 10:02:59 +00:00
login_test.go	chore: rename API test suites (#938)	2025-06-13 08:23:17 +00:00
main_test.go	refactor: use Go idioms for running tests	2026-02-17 18:01:05 +01:00
project_test.go	test: fix ParadeDB project search count to 27	2026-03-05 13:57:05 +01:00
register_test.go	chore: rename API test suites (#938)	2025-06-13 08:23:17 +00:00
sessions_test.go	test: add session lifecycle tests	2026-02-25 10:30:25 +01:00
task_attachment_upload_test.go	feat: add session-based auth with refresh token rotation	2026-02-25 10:30:25 +01:00
task_collection_test.go	test: add web tests for prefix/substring search (#2346)	2026-03-05 13:57:05 +01:00
task_comment_test.go	test: add failing test for task comment IDOR	2026-03-20 11:41:28 +00:00
task_test.go	test: add web integration tests for task duplication	2026-03-04 17:20:26 +01:00
token_test.go	chore: rename API test suites (#938)	2025-06-13 08:23:17 +00:00
user_change_password_test.go	test(api): add tests for password validation in reset and update flows	2026-02-25 13:44:56 +01:00
user_confirm_email_test.go	refactor: centralize HTTP error handling (#2062)	2026-01-08 10:02:59 +00:00
user_export_download_test.go	refactor: centralize HTTP error handling (#2062)	2026-01-08 10:02:59 +00:00
user_export_status_test.go	feat: show user export status in settings (#1200)	2025-07-30 15:50:26 +00:00
user_password_request_token_test.go	refactor: centralize HTTP error handling (#2062)	2026-01-08 10:02:59 +00:00
user_password_reset_test.go	test: add web test for disabled user password reset rejection	2026-03-20 11:23:21 +00:00
user_project_test.go	test: verify email masking for external team name search	2026-03-04 20:32:11 +01:00
user_show_test.go	chore: rename API test suites (#938)	2025-06-13 08:23:17 +00:00
user_totp_test.go	refactor: use helper function to check user local	2025-09-04 18:09:21 +02:00