copilot-swe-agent[bot] b3a238744d fix(security): escape HTML in folder browser to prevent XSS from folder names ...

Added escapeHtml() utility function to both Dropbox and OneDrive
callback pages. Folder names, paths, and error messages inserted into
innerHTML via template literals are now escaped to prevent potential
cross-site scripting from malicious folder names.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-20 13:46:08 +00:00

..

static

feat(sharing): add document sharing with expiring links

2026-03-08 21:51:30 +00:00

templates

fix(security): escape HTML in folder browser to prevent XSS from folder names

2026-03-20 13:46:08 +00:00