Andrey Antukh 29f940fb7a

🐛 Sanitize comment content on rendering (#9605) ...

Add escape-html function that escapes HTML special characters and apply
it in the comment editor at four dom/set-html! call sites where
user-provided text is inserted as innerHTML, preventing stored XSS.

Signed-off-by: Andrey Antukh <niwi@niwi.nz>

2026-05-14 11:20:11 +02:00

..

main

🐛 Sanitize comment content on rendering (#9605)

2026-05-14 11:20:11 +02:00

plugins

Merge remote-tracking branch 'origin/main-staging'

2026-05-11 08:46:25 +02:00

render_wasm

🐛 Fix PathData corruption root causes across WASM and CLJS

2026-04-08 17:24:09 +02:00

util

🐛 Sanitize comment content on rendering (#9605)

2026-05-14 11:20:11 +02:00

worker

🎉 Add chunked upload API for large media and binary files

2026-04-21 18:51:10 +00:00

config.cljs

Merge remote-tracking branch 'origin/main' into main-staging

2026-04-22 09:58:20 +02:00

main.cljs

🎉 Add telemetry anonymous event collection (#9483)

2026-05-11 12:42:01 +02:00

plugins.cljs

⏪ Backport MCP from staging (part 1)

2026-04-20 19:37:02 +02:00

rasterizer.cljs

✨ Improve error handling and exception formatting (#8757)

2026-03-24 19:55:23 +01:00

render_wasm.cljs

✨ New render small performance optimizations

2025-10-16 12:40:29 +02:00

render.cljs

⬆️ Update devenv dependencies (#9142)

2026-04-24 14:07:51 +02:00

worker.cljs

✨ Make the binfile export process more resilent to errors

2025-11-19 17:28:55 +01:00