mirror of
https://github.com/makeplane/plane.git
synced 2026-09-02 03:59:00 +02:00
Three findings, all in the test file: - Module docstring referenced test_patch_then_delete_forgery_chain_is_blocked, which doesn't exist — the actual test is test_patch_then_delete_is_still_403_for_a_plain_member. - Issue-create and comment-create tests only asserted created_by wasn't forged, not created_at, even though the same removed override blocks covered both fields. Added a 10-years-back forged created_at to each POST body and asserted it lands nowhere near that value. Co-authored-by: Plane AI <noreply@plane.so>