dragonflight/services/web-ui/public
ZGaetano 9f7cb91cc2 fix: prevent JS injection via token name in confirmRevoke onclick
Token names containing single quotes (e.g. "O'Brien's key") broke the
onclick attribute string by closing the JS string literal early.
Apply JSON.stringify+esc pattern so name is safely embedded as a
JSON string literal instead of a raw single-quoted string.
2026-05-19 00:27:31 -04:00
..
css fix: remove Google Fonts, fix editor link to :47435, fix page titles 2026-05-18 22:56:51 -04:00
img feat(brand): add Wild Dragon logo + favicon 2026-05-18 14:11:29 +00:00
js feat(api.js): add retryAsset() helper for POST /assets/:id/retry 2026-05-19 00:17:39 -04:00
api-tokens.html fix: prevent JS injection via token name in confirmRevoke onclick 2026-05-19 00:27:31 -04:00
capture.html fix(capture): use duration_ms field for recent captures duration display 2026-05-18 23:50:05 -04:00
edit.html feat: wire editor.html as primary editor, fix its sidebar/branding 2026-05-18 23:11:53 -04:00
editor.html fix(editor): keyboard tool shortcuts now actually switch the active tool 2026-05-18 23:53:38 -04:00
favicon.ico feat(brand): add Wild Dragon logo + favicon 2026-05-18 14:11:29 +00:00
home.html feat: wire editor.html as primary editor, fix its sidebar/branding 2026-05-18 23:11:53 -04:00
index.html feat(library): add Retry button for error-status assets in library grid 2026-05-19 00:20:19 -04:00
jobs.html fix(jobs): fetchJobs → loadJobs, add credentials to inline api helper 2026-05-18 23:48:56 -04:00
login.html feat(brand+home): swap sidebar to Wild Dragon logo, add favicon everywhere, fix home counters (status= not state=) 2026-05-18 10:13:08 -04:00
player.html feat(design): broadcast ops console redesign sweep 2026-05-17 19:05:22 -04:00
projects.html fix(projects): prevent JS injection via bin names in onclick handlers 2026-05-19 00:09:49 -04:00
recorders.html feat(recorders): add Edit Recorder panel with PATCH support 2026-05-18 23:35:16 -04:00
tokens.html feat: wire editor.html as primary editor, fix its sidebar/branding 2026-05-18 23:11:53 -04:00
upload.html feat: wire editor.html as primary editor, fix its sidebar/branding 2026-05-18 23:11:53 -04:00
users.html fix(users): prevent JS injection in delete onclick handlers for users/groups 2026-05-19 00:11:06 -04:00