Issues

• Add the tool that makes the sign-in screenshots

  enhancement
  schulydev/SchulyServer#553 · Filter by author PianoNic opened on Nov 6, 2026

• Give the web app a title, a robots.txt and keep pages behind the login out of search

  bug
  schulydev/SchulyServer#546 · Filter by author PianoNic opened on Nov 6, 2026

• Every plugin gets unrestricted access to the full host DbContext and HttpContext

  enhancement
  schulydev/SchulyServer#247 · Filter by author PianoNic opened on Aug 12, 2026

• Unscoped IPluginVaultFactory lets any plugin decrypt any other plugin's (or the host's) vault secrets

  bug
  schulydev/SchulyServer#246 · Filter by author PianoNic opened on Aug 12, 2026

• Plugins share one Postgres superuser — any plugin can read/write another plugin's or the host's data

  bug
  schulydev/SchulyServer#245 · Filter by author PianoNic opened on Aug 12, 2026

• Student document uploads have no content-type/extension allowlist

  bug
  schulydev/SchulyServer#244 · Filter by author PianoNic opened on Aug 12, 2026

• The self-hosting steps put a real S3 secret into a tracked file

  bug
  schulydev/SchulyServer#235 · Filter by author PianoNic opened on Aug 12, 2026