Skip to content

[BUG]: Small fixes for IP match, accessibility and docblocks #106

Closed

Description

@niden
  • The IP allow list match is exact: 127.0.0.1 does not match ::1 or ::ffff:127.0.0.1 (src/DebugBar/Security/AccessGate.php:41). Also document that behind a local proxy, REMOTE_ADDR is 127.0.0.1 for every client.
  • The collapse toggle has an emoji as its name and no aria-expanded. Tabs have no aria-selected. Escape does not close a panel.
  • src/Debug.php:81: typo. :281: the setBlacklist docblock was copied from setShowBackTrace.
  • The headers of debug.js and debug.css still say Phalcon\Support\Debug.
  • The markup contract in debug.js puts .chev inside .frame-call, but the template does not.

Activity

  1. self-assigned this
    on Nov 6, 2026
  2. added
    bugSomething isn't working
    on Nov 6, 2026
  3. added theissue type on Nov 6, 2026
  4. moved this from Backlog to Active Sprint in Phalcon v5on Nov 6, 2026
  5. niden commented on Nov 8, 2026

    @niden
    SponsorMemberAuthor

    Resolved in #143

  6. moved this from Active Sprint to Implemented in Phalcon v5on Nov 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

Projects

  • Status
    Implemented

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions