egg/PROJECT-CONTORL
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
32 Commits 1 Branch 0 Tags
3da0bf5c3a50e51e9b55dab167d2734c315822a5
Commit Graph

1 Commits

Author SHA1 Message Date
beabigegg
3da0bf5c3a security: fix XSS vulnerabilities in GanttChart and AuditPage 
- Add escapeHtml utility function for HTML entity encoding
- Apply escapeHtml to GanttChart popup HTML template
- Apply escapeHtml to AuditPage PDF export HTML template

This prevents potential XSS attacks if task names, user names,
or other dynamic content contains malicious HTML/JavaScript.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-13 21:26:06 +08:00