google-labs-jules[bot] f6a9e5faa7 security(ui): eliminate XSS vector by replacing isHtml bypass with strict specialType ...

Removed the `isHtml` flag support in `UIManager`, which allowed bypassing HTML escaping.
Replaced it with a `specialType` mechanism (specifically 'focus-node') to render trusted
HTML structures internally while ensuring dynamic values are always escaped.
Updated `Security.test.ts` to verify the fix and prevent regression.

Fixes: Potential XSS vulnerability via unchecked HTML injection.

2026-01-19 05:05:28 +00:00

..

e2e

refactor: migrate magnify glass and info panel to TypeScript with Vite and Vue

2025-12-31 17:53:29 -08:00

mocks

refactor: Overhaul testing setup with Vitest, add new unit tests for state and config managers, and update WebGLRenderer.

2025-12-31 20:32:02 -08:00

unit

security(ui): eliminate XSS vector by replacing isHtml bypass with strict specialType

2026-01-19 05:05:28 +00:00