yangzheli 3acdf79beb

fix(frontend): resolve invalid HTML nesting and tabnabbing vulnerabilities (#1904) ...

* fix(frontend): resolve invalid HTML nesting and tabnabbing vulnerabilities

Fix `<button>` inside `<a>` invalid HTML in artifact components and add
missing `noopener,noreferrer` to `window.open` calls to prevent reverse
tabnabbing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(frontend): address Copilot review on tabnabbing and double-tab-open

Remove redundant parent onClick on web_fetch ChainOfThoughtStep to
prevent opening two tabs on link click, and explicitly null out
window.opener after window.open() for defensive tabnabbing hardening.

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-07 09:44:17 +08:00

..

app

fix(frontend): Update route.ts default backend port(#1892)

2026-04-06 14:54:50 +08:00

components

fix(frontend): resolve invalid HTML nesting and tabnabbing vulnerabilities (#1904)

2026-04-07 09:44:17 +08:00

content

Add documents site (#1767)

2026-04-03 07:25:40 +08:00

core

Fix(#1702): stream resume run (#1858)

2026-04-06 14:51:10 +08:00

hooks

ci: enforce code formatting checks for backend and frontend (#1536)

2026-03-29 15:34:38 +08:00

lib

fix(frontend): prevent submit during IME composition (#1562)

2026-03-29 22:36:38 +08:00

server/better-auth

style: format

2026-01-17 00:13:24 +08:00

styles

ci: enforce code formatting checks for backend and frontend (#1536)

2026-03-29 15:34:38 +08:00

typings

feat: add 'about' page

2026-02-06 15:18:37 +08:00

env.js

feat: implement the first section of landing page

2026-01-23 00:15:21 +08:00

mdx-components.ts

Add documents site (#1767)

2026-04-03 07:25:40 +08:00