Security Hardening: XSS Protection (v1.1.0)#10

Merged

shsteimer merged 24 commits intomainfrom

feat/security-hardening

Oct 29, 2025

Commits on Oct 28, 2025

cleaned up some comments
shsteimer
committed
fix(render): skip child traversal when include runs; content takes precedence
shsteimer
committed
test(render): add traversal tests and fixtures for include vs content semantics
shsteimer
committed
chore(templates): remove redundant case-insensitive flag in template id sanitization
shsteimer
committed
docs: document content vs include precedence, traversal behavior, and escaping
shsteimer
committed
build: update dist/faintly.js
shsteimer
committed
docs(agents): use build:strict in checklist; add size-check scripts and CI uses build:strict
shsteimer
committed
chore(dev): update dev tooling and apply security overrides\n\n- @web/test-runner -> 0.20.2\n- @babel/eslint-parser -> 7.28.5\n- eslint-plugin-import -> 2.32.0\n- esbuild -> 0.25.11\n- overrides: k…
shsteimer
committed
chore: deps updates
shsteimer
committed

Commits on Oct 29, 2025