beabigegg 3da0bf5c3a security: fix XSS vulnerabilities in GanttChart and AuditPage ...

- Add escapeHtml utility function for HTML entity encoding
- Apply escapeHtml to GanttChart popup HTML template
- Apply escapeHtml to AuditPage PDF export HTML template

This prevents potential XSS attacks if task names, user names,
or other dynamic content contains malicious HTML/JavaScript.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-13 21:26:06 +08:00

.claude/commands/openspec

feat: implement user authentication module

2025-12-28 23:41:37 +08:00

backend

security: remove .env from git and update .gitignore

2026-01-13 21:24:16 +08:00

frontend

security: fix XSS vulnerabilities in GanttChart and AuditPage

2026-01-13 21:26:06 +08:00

openspec

feat: implement 5 QA-driven security and quality proposals

2026-01-12 23:19:05 +08:00

.gitignore

security: remove .env from git and update .gitignore

2026-01-13 21:24:16 +08:00

.mcp.json

Fix test failures and workload/websocket behavior

2026-01-11 08:37:21 +08:00

AGENTS.md

feat: implement user authentication module

2025-12-28 23:41:37 +08:00

CLAUDE.md

feat: implement user authentication module

2025-12-28 23:41:37 +08:00

mcp-lsp-proxy.sh

chore: add MCP LSP proxy configuration

2026-01-08 22:52:33 +08:00

prd.txt

feat: implement user authentication module

2025-12-28 23:41:37 +08:00

projectctl.sh

fix: resolve duplicate header and improve Redis management

2026-01-07 21:53:16 +08:00

Technical Specifications．txt

feat: implement user authentication module

2025-12-28 23:41:37 +08:00

Description

No description provided

954 KiB

Languages

Python 66.4%

TypeScript 32.7%

Shell 0.7%

CSS 0.1%