Issues

• Apply for Defense Access in the Cyber Verification Program

  citry-dev/citry#616 · Filter by author JuroOravec opened on Nov 5, 2026

• Replace RcDom with a tree Citry owns

  citry-dev/citry#613 · Filter by author JuroOravec opened on Nov 5, 2026

• Make the next release smoother

  citry-dev/citry#608 · Filter by author JuroOravec opened on Nov 2, 2026

• Report an SVG <set> or <animate> link to javascript: in citry check and the editor

  enhancement
  citry-dev/citry#607 · Filter by author JuroOravec opened on Nov 2, 2026

• Put each attribute on its own line in the CTransferList and CFormCollection templates

  citry-dev/citry#606 · Filter by author JuroOravec opened on Nov 2, 2026

• Let a template-written onclick pass on <c-element> with c-is or c-bind

  enhancement
  citry-dev/citry#605 · Filter by author JuroOravec opened on Nov 2, 2026

• Group security regression tests by rule, and add property tests

  citry-dev/citry#604 · Filter by author JuroOravec opened on Nov 2, 2026

• Write a trust-boundary design doc for the template and extension APIs

  documentation
  citry-dev/citry#603 · Filter by author JuroOravec opened on Nov 2, 2026

• Make URLRoute matching linear in path length, whatever the routes

  citry-dev/citry#602 · Filter by author JuroOravec opened on Nov 2, 2026

• Decide whether Citry checks the scheme of link URLs set through c-bind

  v1.1
  citry-dev/citry#601 · Filter by author JuroOravec opened on Nov 2, 2026

• Let <a download href="data:..."> pass security_javascript="forbid"

  v1.1
  citry-dev/citry#600 · Filter by author JuroOravec opened on Nov 2, 2026

• Report repeated <html> and <body> cost to html5ever, and track its attribute-name fix

  citry-dev/citry#599 · Filter by author JuroOravec opened on Nov 2, 2026
  1

• Let a release recover from a registry or signing outage without manual steps

  citry-dev/citry#590 · Filter by author JuroOravec opened on Nov 2, 2026

• Publish the VS Code extension with trusted publishing, then remove the registry tokens

  citry-dev/citry#589 · Filter by author JuroOravec opened on Nov 2, 2026

• Weekly Python tests on PyPy or free-threaded CPython failed

  citry-dev/citry#585 · Filter by author github-actions opened on Nov 2, 2026
  1

• citry preview fails for a component with Events (Vue compile error at <!doctype>)

  bug
  citry-dev/citry#580 · Filter by author JuroOravec opened on Nov 2, 2026

• Serve the Events and i18n runtimes from a content-hashed URL

  v1.1
  citry-dev/citry#578 · Filter by author JuroOravec opened on Nov 1, 2026

• Add a helper to check that a redirect URL stays on the site

  v1.1
  citry-dev/citry#568 · Filter by author JuroOravec opened on Nov 1, 2026

• Blocks: let non-developers compose pages from developer-defined blocks instead of writing templates

  v1.1
  citry-dev/citry#567 · Filter by author JuroOravec opened on Nov 1, 2026

• Add depth limits to the i18n compiler and the Fluent parser

  v1.1
  citry-dev/citry#561 · Filter by author JuroOravec opened on Nov 1, 2026

• v-for aliases accept the $, _ and citry prefixes that v-slot reserves

  v1.1
  citry-dev/citry#560 · Filter by author JuroOravec opened on Nov 1, 2026

• A refused c-bind key on <c-slot> or <c-fill> raises RuntimeError instead of VueCodeError

  v1.1
  citry-dev/citry#559 · Filter by author JuroOravec opened on Nov 1, 2026

• citry check misses a Vue slot prop in a transparent component and a v-slot name that hides a c-for variable

  v1.1
  citry-dev/citry#558 · Filter by author JuroOravec opened on Nov 1, 2026

• An i18n page shows no server HTML for a v-slot fill, and no browser test covers it

  v1.1
  citry-dev/citry#557 · Filter by author JuroOravec opened on Nov 1, 2026

• Remove the minimatch audit exception once vscode-languageclient moves to minimatch 11

  v1.1
  citry-dev/citry#552 · Filter by author JuroOravec opened on Nov 1, 2026