Repository navigation

🔒 FIX: escape user content in renderers and harden attrs default - #150

Merged

chrisjsewell merged 14 commits into

claude/practical-goldberg-xaa9j6

Nov 10, 2026

Merged

🔒 FIX: escape user content in renderers and harden attrs default#150
chrisjsewell merged 14 commits into
masterfrom
claude/practical-goldberg-xaa9j6

Commits on Jul 21, 2026
- 🔒 FIX: escape user content in renderers and harden attrs default
  claude
  committed
  4249d11
- 🐛 FIX: escape default renderers and harden attrs against XSS (#143)
  
  KyleKing
  and
  claude
  committed
  046fc16
- test(143): add categorical XSS guard across plugin renderers
  KyleKing
  committed
  811e7e0
- Merge branch 'fix/xss-and-attrs-143' into kyle/xss-and-attrs-fixes-143
  KyleKing
  committed
  ec1a5a4
- refactor: minimize diff
  KyleKing
  committed
  e4eb4cd
- docs: also rollback cosmetic docstring changes to minimize diff
  KyleKing
  committed
  c977b60
Commits on Nov 9, 2026
Commits on Nov 10, 2026
- 🔀 MERGE: master into the #150 branch
  chrisjsewell
  committed
  51b0e8e