jaredandClaude Sonnet 4.6 33b214eac0 fix: escape ticket_id text content in dynamic events table ...

ticket_id was already escaped in the href attribute but the visible
text (#<id>) used the raw value in an innerHTML template literal.
Apply lt.escHtml() for defense-in-depth against a compromised ticket API.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-11 23:02:09 -04:00

..

.eslintrc.json

Add JS linting and deploy gating to CI pipeline

2026-04-14 10:14:33 -04:00

app.js

fix: escape ticket_id text content in dynamic events table

2026-05-11 23:02:09 -04:00

base.css

Integrate TDS v1.2 lt.* APIs throughout app

2026-04-18 23:46:44 -04:00

base.js

Replace dangling symlinks with real base.css and base.js files

2026-04-18 22:11:44 -04:00

style.css

fix: inspector stale data warning, remove dead supported_modes code

2026-05-11 12:05:08 -04:00