copilot-swe-agent[bot] 883f123138 fix(security): add SRI to jQuery CDN, escape chat ID, use server-side hostname ...

- Add integrity/crossorigin attributes to jQuery 3.6.0 CDN script
- Use | int filter on zammad_chat_id to prevent XSS
- Replace request.headers.get('host') with settings.external_hostname
  for canonical URL and Open Graph tags to prevent host-header injection

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-08 17:40:15 +00:00

..

static

feat(auth): enable local user signup without SMTP, add admin user creation

2026-03-07 19:59:10 +00:00

templates

fix(security): add SRI to jQuery CDN, escape chat ID, use server-side hostname

2026-03-08 17:40:15 +00:00