Area: Files, photos, gallery, ansi (audit p5) · Surface: /emulators/{slug} (xemu Xbox emulator page) · Dimension: native-dialogs · Severity: minor
Native alert() is banned. The sibling C64 emulator launcher in show-file.php already standardized on App.toast for emulator errors, so this xemu path is inconsistent as well as non-compliant. Lower severity because it only fires on a GPU context-loss edge case.
Evidence
platform/templates/emulators/xemu.php:251-253 — `canvas.addEventListener('webglcontextlost', function (e) { alert('WebGL context lost. Reload the page to continue.'); e.preventDefault(); }, false);`. Elsewhere in the same area the C64 emulator correctly uses App.toast (platform/templates/files/show-file.php:497,503,506 `App.toast(msg, 'error')`).
Suggested fix. Replace with App.toast('WebGL context lost. Reload the page to continue.', 'error') (guard with `if (window.App && App.toast)` since the emulator page may load before app.js).
Filed by the automated tenant-app audit and adversarially evidence-verified. Status: verified. Open — not yet actioned.
Patrick Bass
@mobieus