ZGaetano 9f7cb91cc2 fix: prevent JS injection via token name in confirmRevoke onclick ... Token names containing single quotes (e.g. "O'Brien's key") broke the onclick attribute string by closing the JS string literal early. Apply JSON.stringify+esc pattern so name is safely embedded as a JSON string literal instead of a raw single-quoted string.		2026-05-19 00:27:31 -04:00
..
capture	fix(capture): wire bootstrapAutoStart() + add missing captureManager/MAM_API_URL/server (regression from earlier conflict resolution)	2026-05-18 09:25:55 -04:00
editor	fix(editor): show loading banner during auto-import so Edit feels responsive	2026-05-17 22:44:08 -04:00
mam-api	fix(sequences): apply correct 59.94 DF framesToTC to EDL export	2026-05-19 00:22:17 -04:00
premiere-plugin	feat: in-library asset preview + Premiere plugin installer	2026-05-17 08:55:14 -04:00
web-ui	fix: prevent JS injection via token name in confirmRevoke onclick	2026-05-19 00:27:31 -04:00
worker	fix(worker/thumbnail): mark asset ready even when thumbnail extraction fails	2026-05-18 23:51:04 -04:00