10 lines
337 B
Markdown
10 lines
337 B
Markdown
|
# Adversarial Bug Report: Artifact Badges on Task Cards
|
||
|
|
|
||
|
|
## Deep Review
|
||
|
|
ARTIFACT_LABELS mapping is static and matches COLUMNS. Badge rendering depends on review status, which is fetched from the API.
|
||
|
|
|
||
|
|
## Potential Issues
|
||
|
|
1. **XSS in artifact label**: ARTIFACT_LABELS values are hardcoded — no injection vector. Safe.
|
||
|
|
|
||
|
|
## Verdict: PASS
|