[NREM][Space] Consolidate duplicate open issues (6 pairs identified)

[numbers-official]

Summary

NREM analysis identified 6 pairs of duplicate open issues that should be consolidated to reduce noise and improve issue tracking clarity.

Duplicate Pairs

Copilot PR-issues duplicating original issues (same day, 2026-03-18)

Original Issue (numbers-official)	Copilot Duplicate	Topic
#3384 [Feature][High] Add dependency vulnerability scanning to CI pipeline	#3388 Add dependency vulnerability scanning to CI pipeline	CI vulnerability scanning
#3385 [Feature][Medium] Reduce technical debt: 81 untyped any usages...	#3389 Reduce technical debt: eliminate explicit any types...	Tech debt cleanup
#3382 [Security][High] SafeResourceUrlPipe bypasses Angular XSS protection...	#3386 fix(security): SafeResourceUrlPipe XSS — add BUBBLE_IFRAME_URL allowlist	XSS pipe fix
#3383 [Security][Medium] Missing Content Security Policy...	#3387 Add Content Security Policy and fix silent error swallowing	CSP + error handling

Re-filed issues (same author, weeks apart)

Earlier Issue	Later Duplicate	Topic
#3362 (2026-02-24) JWT tokens exposed via unencoded iframe URL query parameters	#3380 (2026-03-12) JWT access and refresh tokens leaked via iframe URL query parameters	JWT leak via iframe
#3357 (2026-02-23) Unencrypted private key storage in Capacitor Preferences	#3372 (2026-03-04) Ethereum private key stored in plaintext via Capacitor Preferences	Private key storage

Suggested Actions

1. For each Copilot duplicate (fix(security): SafeResourceUrlPipe XSS — add BUBBLE_IFRAME_URL allowlist validation #3386-3389): if a linked PR exists, reference the original issue in the PR and close the duplicate issue.
2. For re-filed duplicates ([Security] JWT access and refresh tokens leaked via iframe URL query parameters #3380, [Security] Ethereum private key stored in plaintext via Capacitor Preferences (unencrypted device storage) #3372): close the newer one with a reference to the earlier issue, or vice versa if the newer description is more complete.
3. Consider adding an issue template checklist that prompts authors to search for existing issues before filing.

Evidence

• All issue metadata verified via gh api repos/numbersprotocol/capture-cam/issues/{id}
• Created and author dates confirmed for each pair

---

Generated by NREM Mode with Omni