Dorian d9b4478512 fix: Phase 5 — XSS sanitization, cookie security, redirect validation, input trimming ...

- BootScreen + Settings: v-html now uses DOMPurify.sanitize() for SVG content
- FileBrowser cookie: added Secure flag and 24h expiration
- TOTP secret: hidden by default with reveal toggle button
- Login redirect: validates URL is local-origin before redirecting
- Auth fields: password inputs trimmed before submission
- Route params: appId validated against safe pattern, invalid IDs redirect to /apps

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-18 00:55:00 +00:00

..

api

fix: Phase 5 — XSS sanitization, cookie security, redirect validation, input trimming

2026-03-18 00:55:00 +00:00

assets

mid coding commit

2026-01-24 22:59:20 +00:00

components

fix: Phase 5 — XSS sanitization, cookie security, redirect validation, input trimming

2026-03-18 00:55:00 +00:00

composables

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

data

fix: prevent tokio runtime deadlock in credential issue/verify

2026-03-09 07:43:12 +00:00

locales

fix: indeedhub staging API, nginx caching, nostr identity and UI improvements

2026-03-14 19:08:09 +00:00

router

fix: Phase 5 — XSS sanitization, cookie security, redirect validation, input trimming

2026-03-18 00:55:00 +00:00

services

test: achieve 80%+ branch/function coverage on frontend logic (E2E-03)

2026-03-11 17:18:37 +00:00

stores

feat: v1.2.0-alpha — E2E encrypted mesh relay, steganography, relay status polling

2026-03-17 23:56:37 +00:00

types

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

utils

fix: consolidate IndeedHub icon to indeedhub.png and fix all references

2026-03-15 04:01:58 +00:00

views

fix: Phase 5 — XSS sanitization, cookie security, redirect validation, input trimming

2026-03-18 00:55:00 +00:00

App.vue

feat: v1.2.0-alpha — E2E encrypted mesh relay, steganography, relay status polling

2026-03-17 23:56:37 +00:00

i18n.ts

feat: add language selector and lazy-load i18n infrastructure

2026-03-14 05:41:33 +00:00

main.ts

feat: add vue-i18n infrastructure and externalize all UI strings (A11Y-03)

2026-03-11 13:45:59 +00:00

style.css

feat: bitcoin-ui CSS fix, HTTPS proxy support, deploy script improvements

2026-03-16 12:58:35 +00:00