Skip to content

Inline node editor drops r/R keystrokes (data corruption) — fix#147

Merged
mvalancy merged 1 commit into
devfrom
fix/inline-editor-key-hijack
Jun 20, 2026
Merged

Inline node editor drops r/R keystrokes (data corruption) — fix#147
mvalancy merged 1 commit into
devfrom
fix/inline-editor-key-hijack

Conversation

@mvalancy

Copy link
Copy Markdown
Member

Two global keydown shortcuts ('r'/'R' refresh, Shift+R reinit) hijacked keystrokes while typing in the inline node-title editor, dropping every r/R and persisting the wrong title to the DB. Guarded both to bail on editable targets. Found + verified by the live in-depth audit; verified live-dev that 'Marketing Roadmap RRR' now persists exactly.

🤖 Generated with Claude Code

…orruption)

Two document-level keydown shortcuts ('r'/'R' → refreshTextVisibility; Shift+R →
reinit) fired even while the user was typing in the inline node-title editor,
silently swallowing every r/R character and PERSISTING the corrupted title to the
DB (e.g. "Marketing Roadmap" → "Maketing oadmap"). Guard both handlers to bail
when the event target is an editable field (INPUT/TEXTAREA/contenteditable) — the
same guard the undo shortcut already uses.

Found by the live Cloudflare in-depth audit (verified, root-caused). Verified
live-dev: typing "Marketing Roadmap RRR" into the inline editor now persists
exactly; web typecheck clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@mvalancy mvalancy merged commit 9ff4b35 into dev Jun 20, 2026
10 of 11 checks passed
@mvalancy mvalancy deleted the fix/inline-editor-key-hijack branch June 20, 2026 08:00
@github-actions

Copy link
Copy Markdown

🧪 Comprehensive Test Suite

  • Unit suites (Node 18.x & 20.x) — core, web, server, mcp-server: ✅ passed
  • Installer & deploy config: ✅ passed

Full-stack smoke gate runs in the CI workflow.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant