Ship CSRF-drift + markdown fixes to production #25

Merged

jared merged 5 commits from development into main 2026-07-15 16:54:01 -04:00

Conversation 0 Commits 5 Files Changed 4

+49 -13

5 Commits

Author	SHA1	Message	Date
jaredandClaude Opus 4.8	d535557e5a	Strip trailing whitespace failing phpcs (unblocks CI/deploy) ... CI has been red since the CSRF-drift changes landed a trailing space on the 'success' => false line in these two endpoints, which blocks the deploy job (and therefore beta/prod). No logic change. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-15 14:46:04 -04:00
jaredandClaude Opus 4.8	53d3670c7f	Fix markdown comments breaking on reload (template whitespace parsed as code) ... Stored markdown comments rendered fine in the live preview (parses the raw textarea value) but broke after refresh: the server template emitted the comment text on an indented line, so the on-load renderer parsed element.textContent with ~20 spaces of leading indentation. Markdown treats 4+ leading spaces as a code block, so the first line (e.g. a heading or table row) was mis-parsed and blocks got wrapped in <p>, producing invalid HTML that broke the page layout. - markdown.js: trim the text before parseMarkdown in both on-load renderers so template indentation can't be parsed as a leading code block. - TicketView.php: emit the comment text inline (no surrounding whitespace) so the element's textContent is exactly the stored markdown. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-15 14:42:10 -04:00
jared	8f7c669b8f	Fix markdown code block parser to support language tags and UI classes	2026-07-14 23:46:28 -04:00
jared	5dea47cd01	Fix double-parsing of markdown comments on page load	2026-07-14 23:31:48 -04:00
jared	7a537f46bc	Fix CSRF token drift in add_comment and update_ticket endpoints	2026-07-14 23:19:26 -04:00