ZGaetano 280fc9dff2 fix: XSS in renderTags and stale api.js version in player.html ... Tag values were inserted into innerHTML unsanitized — a tag containing HTML would execute as markup. Switch to DOM-only construction for the tag badges. Also bump api.js cache-buster to v=6.		2026-05-19 00:30:54 -04:00
..
css	fix: remove Google Fonts, fix editor link to :47435, fix page titles	2026-05-18 22:56:51 -04:00
img	feat(brand): add Wild Dragon logo + favicon	2026-05-18 14:11:29 +00:00
js	feat(api.js): add retryAsset() helper for POST /assets/:id/retry	2026-05-19 00:17:39 -04:00
api-tokens.html	fix: prevent JS injection via token name in confirmRevoke onclick	2026-05-19 00:27:31 -04:00
capture.html	fix: bump api.js cache-buster to v=6 in capture.html	2026-05-19 00:28:50 -04:00
edit.html	feat: wire editor.html as primary editor, fix its sidebar/branding	2026-05-18 23:11:53 -04:00
editor.html	fix(editor): keyboard tool shortcuts now actually switch the active tool	2026-05-18 23:53:38 -04:00
favicon.ico	feat(brand): add Wild Dragon logo + favicon	2026-05-18 14:11:29 +00:00
home.html	feat: wire editor.html as primary editor, fix its sidebar/branding	2026-05-18 23:11:53 -04:00
index.html	feat(library): add Retry button for error-status assets in library grid	2026-05-19 00:20:19 -04:00
jobs.html	fix(jobs): fetchJobs → loadJobs, add credentials to inline api helper	2026-05-18 23:48:56 -04:00
login.html	feat(brand+home): swap sidebar to Wild Dragon logo, add favicon everywhere, fix home counters (status= not state=)	2026-05-18 10:13:08 -04:00
player.html	fix: XSS in renderTags and stale api.js version in player.html	2026-05-19 00:30:54 -04:00
projects.html	fix(projects): prevent JS injection via bin names in onclick handlers	2026-05-19 00:09:49 -04:00
recorders.html	feat(recorders): add Edit Recorder panel with PATCH support	2026-05-18 23:35:16 -04:00
tokens.html	feat: wire editor.html as primary editor, fix its sidebar/branding	2026-05-18 23:11:53 -04:00
upload.html	feat: wire editor.html as primary editor, fix its sidebar/branding	2026-05-18 23:11:53 -04:00
users.html	fix(users): prevent JS injection in delete onclick handlers for users/groups	2026-05-19 00:11:06 -04:00