All issues

Search results

Private plugin storage: declared resources are admin-CRUD-visible, so plugins cannot hold credentials

Status: Open.

#388 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 16, 2026

No CSPRNG in the plugin sandbox: crypto.getRandomValues is missing, so plugins cannot mint tokens safely

Status: Open.

#387 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 16, 2026

Plugin storage has no upsert or unique-key constraint, so keyed records can race into duplicates

Status: Open.

#386 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 16, 2026

definePlugin drops contentAccess, so the content-editor scaffold fails its own lint out of the box

Status: Open.

#385 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 16, 2026

Scaffolded plugins cannot build outside the monorepo: @instatic/plugin-sdk does not resolve

Status: Open.

#384 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 16, 2026

Plugin API for arbitrary redirects (cms.redirects) — 301/302/410 + regex

Status: Open.

#383 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 16, 2026

[Feature]: Form honeypot, time-trap and rate-limit rejections are unobservable — no event, no counter, no record

Status: Open.

#380 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 15, 2026

[Bug]: Plugin dashboard widgets render without a PluginContext, so usePluginRoutes throws inside them

Status: Open.

#379 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 15, 2026

[Bug]: Not all colors showing in contextual color picker panel

bugSomething isn't workingSomething isn't working

Status: Open.

#378 In CoreBunch/Instatic;

· bluefuze opened on Aug 14, 2026

[Feature]: ContentTableSummary omits the table id, so data-instatic-target-table cannot be resolved

Status: Open.

#377 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 14, 2026

[Feature]: Host gate rejections are distinguishable only by message text

Status: Open.

#376 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 14, 2026

[Bug]: File inputs on CMS forms silently discard the file and store only its name

Status: Open.

#375 In CoreBunch/Instatic;

· Mariomarquezt opened on Aug 14, 2026