google-labs-jules[bot] 6eeb83ea5e 🛡️ Sentinel: [HIGH] Fix DOM-based XSS in file upload ...

- Added `_escapeHtml` helper to sanitize user-controlled file name.
- Used it to sanitize `file.name` before appending it to `row.innerHTML`.
- Applied changes to `frontend/static/js/upload.js`.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-05-28 03:07:41 +00:00

..

static

🛡️ Sentinel: [HIGH] Fix DOM-based XSS in file upload

2026-05-28 03:07:41 +00:00

templates

fix: escape search result template values (#853)

2026-05-17 16:06:39 +02:00

translations

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

input.css

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

package-lock.json

fix: resolve dependabot npm alerts

2026-05-23 02:37:54 +02:00

package.json

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

tailwind.config.js

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00