Haven

accessibilitySettings.test.js

Text size keeps the density and DM PiP message sizes as its base (#5775 )

2026-10-13 17:09:52 -04:00

accessRules.test.js

Roles: hand out only what you hold, and respect custom levels

2026-10-15 00:07:38 -04:00

adminRole.integration.test.js

Admin role fixes: reset to default makes it again, and a deleted one stays deleted

2026-10-02 07:57:19 -04:00

appVoiceScreenPip.test.js

Screen sharing: drop the native GStreamer path, add a bitrate setting, fix black tiles on GPU encoders (#5672 )

2026-10-02 12:12:31 -04:00

autoCert.integration.test.js

Every install path uses Haven's own certificate generator (#5586 )

2026-09-08 17:23:38 -04:00

automodCode.test.js

Auto-mod: a bare address inside code in a chat message is not a link

2026-10-02 11:06:00 -04:00

automodStrikes.test.js

Auto-Mod: blocked links are strikes only for accounts under a week old

2026-10-10 21:40:27 -04:00

backupSecrets.test.js

Backups and restores ask for the password again; downloads use one-time tickets

2026-10-15 00:25:29 -04:00

botAudio.test.js

Screen sharing: drop the native GStreamer path, add a bitrate setting, fix black tiles on GPU encoders (#5672 )

2026-10-02 12:12:31 -04:00

botAudioApi.integration.test.js

…

botHardening.integration.test.js

Bot deletes of others' messages need the creator's delete_message

2026-10-15 00:51:49 -04:00

botVoice.test.js

Apply the creator's role gate and ban to bot voice channels

2026-10-15 00:30:16 -04:00

botVoiceApi.integration.test.js

…

channelCodeClientState.test.js

Screen sharing: drop the native GStreamer path, add a bitrate setting, fix black tiles on GPU encoders (#5672 )

2026-10-02 12:12:31 -04:00

channelDragAutoscroll.test.js

Split app-channels.js (3,400 lines) into four files by area, a pure move

2026-10-02 11:26:15 -04:00

channelRotation.test.js

Screen sharing: drop the native GStreamer path, add a bitrate setting, fix black tiles on GPU encoders (#5672 )

2026-10-02 12:12:31 -04:00

channelTabsLayout.test.js

Add tests for the Channel Tabs layout (#5749 )

2026-10-10 16:01:17 -04:00

chatImageUrls.test.js

…

chromeLayout.test.js

Chrome layout: show menu labels in the user's language where Haven has them (#5681 )

2026-10-05 18:17:01 -04:00

clientIp.test.js

TRUST_PROXY defaults to proxies on this machine or the local network, so a directly exposed server ignores a forged X-Forwarded-For; sockets and HTTP read the setting the same way

2026-09-23 23:27:00 -04:00

codeBlocks.test.js

Code blocks written on one line keep their first word

2026-10-02 10:43:25 -04:00

compactLayout.test.js

Split app-media.js (5,954 lines) into seven files by area, a pure move

2026-10-02 10:00:15 -04:00

coreCss.js

Split style.css (20,790 lines) into sixteen files by area, a pure move

2026-10-02 11:16:06 -04:00

deletedAttachments.test.js

Deleted attachments expire after a week by default, whether or not auto-cleanup is on

2026-09-10 21:52:56 -04:00

deleteParentChannel.test.js

Deleting a parent channel deletes its sub-channels, after a second warning that names them

2026-09-10 22:41:19 -04:00

dmCalls.test.js

DM calls: starting voice in a DM or group DM rings the other members (#5697 )

2026-09-26 16:31:58 -04:00

dmSendGate.test.js

DMs ask before anything goes out unencrypted, remember each contact's encryption key and warn when it changes, and the lock in a DM's header shows whether it is encrypted

2026-09-23 23:55:00 -04:00

e2e-group.test.js

Remove internal planning docs from the repo

2026-10-10 18:08:54 -04:00

e2eFileCleanup.test.js

Files sent in encrypted DMs are removed with their messages (#5699 ): the sender names the file alongside the encrypted message (only their own uploads count), deleting the message, the DM or the channel by any route notes it through a database trigger, and a sweep moves it to deleted-attachments. Deleted rows are also overwritten in the database file instead of lingering until reused

2026-09-27 18:35:05 -04:00

e2ePassphrase.test.js

Settings > Encryption: lock the encrypted-DM key backup with a passphrase of your own instead of your login password, which the server receives at every sign-in; sign-in then asks for the passphrase, and a password change leaves the backup alone

2026-09-24 00:25:52 -04:00

e2eSigningInit.test.js

Group DM signing keys are set up once per connection, so a first-time user no longer ends up with mismatched keys (#5733 )

2026-10-05 18:28:49 -04:00

effectsPreference.test.js

Arrange your own channel order, kept on your account (#5779 )

2026-10-14 00:43:14 -04:00

emojiUpload.test.js

Split app-media.js (5,954 lines) into seven files by area, a pure move

2026-10-02 10:00:15 -04:00

extensionUpdateDownloads.test.js

Extension updates: a download that drops part way fails instead of hanging

2026-10-03 15:40:14 -04:00

extensionUpdateModal.test.js

Move extension updates into their own files

2026-10-03 15:46:55 -04:00

extensionUpdates.integration.test.js

Move extension updates into their own files

2026-10-03 15:46:55 -04:00

extensionUpdates.test.js

Extension updates: keep file permissions, log why a blocklist check failed

2026-10-03 15:40:52 -04:00

fakeDiscord.js

Ferry uploads Haven pictures and files to Discord instead of sending their paths

2026-10-14 19:06:03 -04:00

fcmTokens.test.js

Cap FCM tokens per account and drop tokens FCM calls invalid

2026-10-15 00:38:29 -04:00

feedAnchor.test.js

Chat feed keeps your place while messages change height

2026-10-04 18:19:41 -04:00

ferry.test.js

Ferry bridges forums: a Discord forum pairs with a Haven forum, new posts on either side become posts on the other with title, tags and author, replies cross both ways, and which topic is which post survives a restart; a forum only pairs with a forum

2026-10-02 00:20:14 -04:00

ferryAutomod.test.js

Auto-mod allowlist: haven-app.com is on it, so links to Haven's own guide are not blocked

2026-10-02 11:06:00 -04:00

ferryForums.test.js

Ferry uploads Haven pictures and files to Discord instead of sending their paths

2026-10-14 19:06:03 -04:00

forumBlog.test.js

Server side of Blog mode for forums (#5742 )

2026-10-09 13:23:19 -04:00

forumChannels.test.js

…

forumLinkTopics.test.js

Forum topics that are only a link show the link's title and picture (#5745 )

2026-10-09 23:34:36 -04:00

forumParity.test.js

Forums read like forums: topic cards, gallery, sort, tags, New Post, plus NSFW channels, settings search and one create form (#5595 )

2026-09-08 17:57:56 -04:00

forumViews.test.js

Split style.css (20,790 lines) into sixteen files by area, a pure move

2026-10-02 11:16:06 -04:00

forumVotes.test.js

Add likes and dislikes on forum posts (#5742 )

2026-10-09 11:24:54 -04:00

gradientRoles.test.js

Settings: an Accessibility section for text size, spacing, fonts, contrast and motion (#5775 )

2026-10-13 17:06:23 -04:00

group-e2e-server.test.js

Replace em dashes in test comments and names

2026-10-10 16:08:55 -04:00

groupDmAdminDelete.test.js

The server admin can now delete a group DM for everyone in it from the DM menu: the group goes away at once for every member and pending invitee, the pop-out DM window included, along with its messages, keys and the members' attachments. Moderators and the group's creator cannot do this, and an admin outside a group can do the same through Delete DM (#5740 )

2026-10-06 20:54:14 -04:00

groupDmClient.test.js

Someone kicked from a channel is told which channel they were kicked from, instead of a message that reads like they were kicked from the server

2026-10-06 19:59:54 -04:00

groupDmDelete.test.js

Only one channel or DM menu is open at a time (#5744 )

2026-10-09 10:34:37 -04:00

groupDmKick.test.js

Kicking someone from a group DM now removes the group from their app straight away and tells the members still in it, so their member list updates and they switch to a new key the kicked person does not have; the kicked person is told they were removed from the group, and a group that goes away also closes in the pop-out DM window (#5740 )

2026-10-06 19:59:54 -04:00

groupDmNotices.test.js

Show invites, joins and leaves in group DMs; mark existing members in the invite list

2026-10-14 01:23:13 -04:00

groupDmRemoveMember.test.js

The person who started a group DM can now remove people from it with Remove from group in the member menu, after a confirm: the removed person loses the group at once on every device and the members still in it switch to a new key, the same as a moderator's kick. Only the group's creator gets this and not on themselves; once they have removed everyone, leaving as the last member deletes the group (#5740 )

2026-10-06 20:54:14 -04:00

groupKeyTrust.test.js

Sending in a group DM no longer refetches the member list and keys every time (#5733 )

2026-10-05 18:28:50 -04:00

groupSignerHistory.test.js

Group messages stay readable after the sender resets their encryption keys (#5733 )

2026-10-05 18:28:49 -04:00

havenGlyphs.test.js

Tests: the format picker looks its labels up with a template string, and the template label test expects the emoji main keeps

2026-09-18 19:59:56 -04:00

highScores.test.js

Accept only safe integer high scores under a per-game ceiling

2026-10-15 00:44:55 -04:00

httpModeHeaders.test.js

Flash games load the Ruffle player from Haven itself: pinned as a dependency instead of the newest build from unpkg, and no page's CSP lists unpkg any more

2026-09-23 23:38:50 -04:00

i18n.test.js

Add manual plugin and theme updates (#5588 )

2026-10-03 15:35:49 -04:00

importAuthors.test.js

Show invites, joins and leaves in group DMs; mark existing members in the invite list

2026-10-14 01:23:13 -04:00

importFetchJob.test.js

Discord import reads channels in the background so proxies can't cut it off

2026-10-14 14:17:46 -04:00

ipBanGuard.test.js

Automod and bulk cleanup IP bans spare this machine and staff addresses

2026-10-15 00:46:42 -04:00

ipBanLimits.test.js

IP bans cannot cover this machine, the banner, or higher staff

2026-10-14 23:41:21 -04:00

kickOfflineMember.test.js

Members can be kicked while they are offline

2026-09-08 23:12:33 -04:00

lazyMedia.test.js

Split app-utilities.js (5,343 lines) into five files by area, a pure move

2026-10-02 10:05:33 -04:00

markdownTables.test.js

Markdown tables keep their rows instead of showing them as text

2026-10-13 19:11:01 -04:00

mediaToken.test.js

Refuse media proxy tokens for banned or deleted accounts

2026-10-15 00:43:28 -04:00

memberDefaults.test.js

Default Theme and the shared new-member theme are one setting (#5747 ) (#5748 )

2026-10-09 23:24:08 -04:00

messageTimestamps.test.js

Split app-utilities.js (5,343 lines) into five files by area, a pure move

2026-10-02 10:05:33 -04:00

modCases.test.js

Moderation history: warnings, notes and a record of every action (#5759 )

2026-10-13 17:42:11 -04:00

newAccountPostWait.test.js

Limit new DMs per hour and apply the new-account wait to them

2026-10-10 18:32:22 -04:00

newDmLimit.test.js

Limit new DMs per hour and apply the new-account wait to them

2026-10-10 18:32:22 -04:00

officialMessageOptions.test.js

Official messages: keep official mode on, and choose how they look (#5758 )

2026-10-12 17:14:57 -04:00

orphanDms.test.js

Notes to self (a DM with yourself) are no longer deleted by the 15 minute orphan DM cleanup

2026-10-05 18:30:22 -04:00

outboundProxy.test.js

Send proxied requests to the checked address; refuse unresolved names

2026-10-15 00:40:41 -04:00

permGrid.test.js

permGrid test: Reset to Default now yields the stock roles plus the Admin role, matching a new server

2026-10-02 08:03:50 -04:00

presenceDeltas.test.js

Member lists scale: updates are batched per channel, the app gets only the members that changed with default fields left out, and older apps still get whole lists; 200 people arriving went from 700 MB of traffic to 10 MB

2026-09-27 02:34:24 -04:00

previewUrls.test.js

Link previews follow no redirects on site APIs, clean image URLs, hide errors

2026-10-15 00:42:39 -04:00

pushMutes.test.js

Server mute with an except @mentions option, and Mute for me

2026-10-14 01:12:43 -04:00

recoveryCodesSession.test.js

Harden sign-in: 2FA setup asks for the password, codes work once, safer recovery

2026-10-14 23:55:42 -04:00

releasableUploads.test.js

Deleting a message or DM only removes files its own author uploaded as attachments and nothing else uses; naming someone else's file in a message no longer gets it purged

2026-09-23 21:04:06 -04:00

replyContext.test.js

…

replyToBot.integration.test.js

Bots can post into threads: the webhook API takes thread_id (a top-level message in the bot's channel), and the reply shows in the thread the same way a person's does (#5706 )

2026-09-29 17:56:05 -04:00

roleGateRooms.test.js

Role-gated channels stream only to people their gate lets in

2026-10-14 23:43:23 -04:00

roleMentions.test.js

Split app-utilities.js (5,343 lines) into five files by area, a pure move

2026-10-02 10:05:33 -04:00

rolesWishlist.test.js

A channel's member list leaves out members its required roles hide it from, and updates as soon as the requirement changes (#5703 )

2026-09-29 17:52:31 -04:00

safeFetch.test.js

Link previews and the image proxy check every redirect and every address a host resolves to, and connect to the address they checked, so a member cannot point them at the server's own network

2026-09-23 20:58:27 -04:00

sanitizeSoundName.test.js

…

screenBitrate.test.js

Replace em dashes in test comments and names

2026-10-10 16:08:55 -04:00

screenRelayAuto.test.js

Screen sharing: drop the native GStreamer path, add a bitrate setting, fix black tiles on GPU encoders (#5672 )

2026-10-02 12:12:31 -04:00

screenWatchdog.test.js

Replace em dashes in test comments and names

2026-10-10 16:08:55 -04:00

selfDestruct.test.js

Self-destruct follow-ups (#5731 ): files shared earlier stay, forum topics still open, shorter hint

2026-10-05 17:19:48 -04:00

selfDmBackfill.test.js

An old one to one DM whose partner left is no longer turned into notes to self by the 4.19.0 upgrade: only a DM nobody else ever wrote in counts, and servers already upgraded to 4.19.0 get those DMs corrected once

2026-10-06 19:59:54 -04:00

selfsignedCert.test.js

Every install path uses Haven's own certificate generator (#5586 )

2026-09-08 17:23:38 -04:00

serverListSync.test.js

In the Desktop app, removing a server or changing its name or icon from Manage Servers is marked as the user's own, so the app can tell it apart from routine syncing and asks only about these

2026-10-09 13:12:31 -04:00

serverTemplate.test.js

Template unit test: a temp folder Windows still holds no longer fails the test file

2026-10-06 20:02:07 -04:00

serverTemplateApi.integration.test.js

When a server template creates or changes roles, members online who hold them get their new permissions straight away, the same way editing a role in Settings pushes them; the role refresh helpers now live in roleRefresh.js so both paths share them (#5732 )

2026-10-05 18:44:29 -04:00

settingDefaults.test.js

Auto-Mod no longer bans on its own by default

2026-10-10 18:32:22 -04:00

soundboardHotkeyControls.test.js

Split app-media.js (5,954 lines) into seven files by area, a pure move

2026-10-02 10:00:15 -04:00

staffPresence.test.js

Closed forum topics take replies only from moderators and admins

2026-10-14 00:10:31 -04:00

themeCompatibility.test.js

Replace em dashes in test comments and names

2026-10-10 16:08:55 -04:00

themeContract.test.js

Split style.css (20,790 lines) into sixteen files by area, a pure move

2026-10-02 11:16:06 -04:00

threadReplyFiles.test.js

Deleting a topic or thread also clears its replies' files from uploads (#5783 )

2026-10-14 23:36:05 -04:00

tunnelCloudflared.test.js

…

uploadPermission.integration.test.js

Uploads and the other server routes use the same permission rules as the app: a permission given by the level thresholds or set on one person now counts, and a person's own deny now beats a role (it used to look at roles only, so someone shown as allowed could still be refused a picture upload)

2026-10-01 20:27:30 -04:00

uploadsTrim.test.js

Auto-Cleanup can cap the uploads folder: past a size you set, the oldest messages with files are removed until it is back under, and their files go to deleted-attachments. Pinned, archived and exempt messages stay, and avatars, emoji and stickers are never removed (Discussion 59)

2026-09-30 17:06:15 -04:00

voiceRelay.test.js

Voice relay hardening: a kicked person stops receiving the call at once, and any relay session whose person has left the call is closed within seconds; relay messages have a rate limit; one consumer per track, one setup per source at a time, capped consumers and upload per person; each source must carry its own kind; ending a screen share or camera stops its relay track; the setup page says the relay's address is visible to people in a call

2026-09-27 18:35:05 -04:00

voiceScreenSignaling.test.js

…

webhookBulkDelete.integration.test.js

File cleanup only removes unused channel uploads

2026-10-15 00:07:39 -04:00

webhookCallback.test.js

Always block Alibaba, AWS IPv6 and Azure metadata addresses

2026-10-15 00:41:17 -04:00

webhookFields.test.js

Limit bot avatars to uploads or https and clean bot names

2026-10-15 00:33:23 -04:00