Issues

• WebUI hardening follow-ups: shared origin with proxied apps, CLI shell outlives logout, CSP gaps

  backlogbug
  WLAN-Pi/wlanpi-webui#161 · Filter by author joshschmelzle opened on Sep 29, 2026

• Network page scrolls horizontally at 640-647px viewport widths

  backlogbug
  WLAN-Pi/wlanpi-webui#158 · Filter by author joshschmelzle opened on Sep 28, 2026

• Settings toggle to keep system logs across reboots

  backlog
  WLAN-Pi/wlanpi-webui#157 · Filter by author joshschmelzle opened on Sep 25, 2026
  

• /network refreshes block the single gunicorn worker and slow the whole WebUI

  backlog
  WLAN-Pi/wlanpi-webui#149 · Filter by author joshschmelzle opened on Sep 24, 2026
  

• Test runs are not warning-clean (coverage-badge pkg_resources, authlib.jose)

  backlogchore
  WLAN-Pi/wlanpi-webui#147 · Filter by author joshschmelzle opened on Sep 24, 2026

• Dev server (python -m wlanpi_webui) runs the Werkzeug debugger on 0.0.0.0

  backlogbug
  WLAN-Pi/wlanpi-webui#146 · Filter by author joshschmelzle opened on Sep 24, 2026

• Don't log unknown usernames verbatim on failed login

  backlogbug
  WLAN-Pi/wlanpi-webui#145 · Filter by author joshschmelzle opened on Sep 24, 2026

• Cap concurrent login attempts (single gunicorn worker stalls ~2 s per failure)

  backlogenhancement
  WLAN-Pi/wlanpi-webui#144 · Filter by author joshschmelzle opened on Sep 24, 2026

• Login backoff: clients behind one NAT share a counter

  backlogenhancement
  WLAN-Pi/wlanpi-webui#143 · Filter by author joshschmelzle opened on Sep 24, 2026

• Login backoff: key hard blocks on (IP, username) and tolerate an admin's typo during an attack

  backlogenhancement
  WLAN-Pi/wlanpi-webui#142 · Filter by author joshschmelzle opened on Sep 24, 2026

• End WebUI sessions when the password is changed outside the WebUI

  backlogenhancement
  WLAN-Pi/wlanpi-webui#141 · Filter by author joshschmelzle opened on Sep 24, 2026

• End sessions when the user leaves the sudo group or the account is locked

  backlogenhancement
  WLAN-Pi/wlanpi-webui#140 · Filter by author joshschmelzle opened on Sep 24, 2026

• Session registry: treat a deleted store file as invalidation across workers

  backlogbug
  WLAN-Pi/wlanpi-webui#139 · Filter by author joshschmelzle opened on Sep 24, 2026

• Upgrade vendored htmx to 4.x (post-Prague)

  enhancement
  WLAN-Pi/wlanpi-webui#100 · Filter by author joshschmelzle opened on Sep 18, 2026