russell@unturf.com
ec186e286c
element-web-0003/0004 + conduit-0001: CWE-407 deep scan — 3 new defects, 6/6 PASS
element-web-0003: TextForEvent.tsx textForCanonicalAliasEvent alt_aliases
.filter(x => !arr.includes(x)) O(A*B) MEDIUM 19.5x — fix: Set.has()
element-web-0004: utils/arrays.ts arrayDiff + arrayIntersection
.filter(i => !arr.includes(i)) O(A*B) MEDIUM 18x — fix: Set.has()
Used by 15+ callsites: room-list, notifications, spaces, beacons, maps
conduit-0001: server_server.rs get_missing_events_route
earliest_events.contains() (Vec) in growing BFS loop O(Q*E) MEDIUM-HIGH 7.4x
Federation endpoint — remote server controls input size
matrix-rust-sdk: could not clone (GitHub HTTPS unreachable)