From ed091411759924892cfd3c1834199b16ac32273f Mon Sep 17 00:00:00 2001 From: Tobias Gesellchen Date: Sat, 29 Aug 2026 17:51:42 +0200 Subject: [PATCH] fix(player): remove leftover debug console.log CodeQL alert 319 (js/log-injection). This logged the WebSocket discovery_status payload verbatim to the browser console under a "[DEBUG_LOG]" tag -- development-only cruft left in, not something that serves any product purpose. Co-Authored-By: Claude Sonnet 5 --- pkg/service/soundtouchweb/static/js/app.js | 1 - 1 file changed, 1 deletion(-) diff --git a/pkg/service/soundtouchweb/static/js/app.js b/pkg/service/soundtouchweb/static/js/app.js index eed7ba18..39a1f4dd 100644 --- a/pkg/service/soundtouchweb/static/js/app.js +++ b/pkg/service/soundtouchweb/static/js/app.js @@ -102,7 +102,6 @@ function App() { if (msg.type === 'devices') { setDevices(msg.data || {}); } else if (msg.type === 'discovery_status') { - console.log('[DEBUG_LOG] discovery_status:', msg.data); if (msg.data?.isDiscovering !== undefined) { setIsDiscovering(msg.data.isDiscovering); } else if (msg.data?.status === 'starting') {