alexei.dolgolyov 5a6002be76 fix: address security findings from final review ...

- Replace regex HTML sanitization with DOMPurify in NoteWidget (XSS fix)
- Remove allow-same-origin from default iframe sandbox in EmbedWidget
- Add URL scheme validation for embed URLs (http/https only)
- Install isomorphic-dompurify dependency

2026-03-24 23:50:37 +03:00

.gitea/workflows

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

plans

feat(phase2): phase 6 - integration & polish

2026-03-24 23:43:31 +03:00

prisma

feat(phase2): phase 6 - integration & polish

2026-03-24 23:43:31 +03:00

src

fix: address security findings from final review

2026-03-24 23:50:37 +03:00

.dockerignore

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

.env.example

feat(phase2): OAuth/Authentik integration + drag-and-drop reordering

2026-03-24 22:54:54 +03:00

.gitignore

chore: add plan files and gitignore for MVP feature

2026-03-24 19:46:26 +03:00

.prettierignore

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

.prettierrc

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

components.json

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

docker-compose.yml

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

Dockerfile

feat(mvp): phase 8 - integration, testing & deployment

2026-03-24 22:09:17 +03:00

eslint.config.js

feat(phase2): phase 6 - integration & polish

2026-03-24 23:43:31 +03:00

package-lock.json

fix: address security findings from final review

2026-03-24 23:50:37 +03:00

package.json

fix: address security findings from final review

2026-03-24 23:50:37 +03:00

PLAN_PROMPT.md

docs: add project plan prompt

2026-03-24 19:42:21 +03:00

svelte.config.js

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

tsconfig.json

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

vite.config.ts

fix: resolve runtime errors and missing routes

2026-03-24 22:39:23 +03:00

S

Description

No description provided

2.9 MiB

Releases 1

0.0.1 Latest

2026-04-10 21:23:00 +03:00

Languages

TypeScript 49.3%

Svelte 42%

HTML 7.1%

CSS 1.2%

JavaScript 0.2%

Other 0.2%