google-labs-jules[bot] 6eeb83ea5e 🛡️ Sentinel: [HIGH] Fix DOM-based XSS in file upload ...

- Added `_escapeHtml` helper to sanitize user-controlled file name.
- Used it to sanitize `file.name` before appending it to `row.innerHTML`.
- Applied changes to `frontend/static/js/upload.js`.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-05-28 03:07:41 +00:00

..

annotations.js

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

claim.js

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

comments.js

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

common.js

feat(ui): add dedicated Devices page for mobile tokens and registered devices

2026-03-17 11:00:36 +00:00

fontawesome-loader.js

chore: apply ruff formatting and fix whitespace issues

2026-02-13 09:12:11 +00:00

sharing.js

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

upload.js

🛡️ Sentinel: [HIGH] Fix DOM-based XSS in file upload

2026-05-28 03:07:41 +00:00