 biggy
|
d46f9644bb
|
feat: DOMPurify HTML sanitization (P3)
Replace regex-based stripScriptTags with isomorphic-dompurify:
- Whitelist-based HTML sanitization prevents XSS bypasses
- Removes scripts, event handlers, and dangerous attributes
- Preserves data: URIs for inlined CSS/images
- Maintains complete document structure for Tizen TVs
Also updates:
- Data flow diagram comments (SEC 19)
- Modification guide comments
- Dependencies (isomorphic-dompurify ^2.36.0)
|
2026-06-24 07:46:05 +02:00 |
|
|
biggy
|
3a21070d62
|
chore: static analysis baseline
Pre-analysis checkpoint before implementing fixes for:
- bakeStyles field mapping
- error logging improvements
- HTML sanitization hardening
|
2026-06-24 07:46:05 +02:00 |
|
|
biggy
|
a1a1446ed1
|
build: add linting and formatting tooling
|
2026-05-13 08:04:55 +02:00 |
|
|
biggy
|
722a3143dc
|
refactor: replace MJPEG streaming with screenshot + meta-refresh
- Remove multipart/x-mixed-replace streaming (broken on Chromium)
- Add per-view screenshot rendering with base64 HTML embedding
- Implement resource inlining for CSS, images, and favicons
- Add render locks to prevent overlapping Puppeteer operations
- Simplify UpdateViewBody type to extend Partial<CreateViewBody>
- Update browser args for better stability
- Standardize formatting (tabs to spaces)
|
2026-05-12 23:31:33 +02:00 |
|
|
biggy
|
edbe3f9bf2
|
init
|
2026-05-12 23:10:10 +02:00 |
|