Files
DashBoard/openspec/changes/archive/2026-02-07-hold-detail-vite-hardening/tasks.md
2026-02-08 08:30:48 +08:00

892 B

1. Hold Detail Vite Modularization

  • 1.1 Add hold-detail entry to Vite build configuration.
  • 1.2 Create frontend/src/hold-detail/main.js by migrating existing page script while preserving behavior.
  • 1.3 Update hold_detail.html to prefer frontend_asset('hold-detail.js') with inline fallback retention.

2. Security and Parity Hardening

  • 2.1 Sanitize dynamic HTML/attribute interpolation in hold-detail module rendering paths.
  • 2.2 Apply equivalent sanitization in inline fallback logic to avoid security bypass.
  • 2.3 Preserve legacy global handler compatibility for existing inline event hooks.

3. Validation

  • 3.1 Build frontend and verify hold-detail.js output in static dist.
  • 3.2 Extend template integration tests for hold-detail module/fallback rendering.
  • 3.3 Run focused pytest suite for template/frontend regressions.