google-labs-jules[bot] 116b04ddc1 🛡️ Sentinel: [HIGH] Fix XSS in upload.js ...

Added an `_escapeHtml` function to properly sanitize `file.name` before it is dynamically rendered into the DOM using `row.innerHTML`. This mitigates a DOM-based Cross-Site Scripting (XSS) vulnerability.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-05-27 03:19:52 +00:00

..

static

🛡️ Sentinel: [HIGH] Fix XSS in upload.js

2026-05-27 03:19:52 +00:00

templates

fix: escape search result template values (#853)

2026-05-17 16:06:39 +02:00

translations

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

input.css

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

package-lock.json

fix: resolve dependabot npm alerts

2026-05-23 02:37:54 +02:00

package.json

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

tailwind.config.js

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00