weichenandCursor
1f42edf80a
Why: The conversation and office fallbacks wrote marked output straight into the page, including converted docx HTML. Evidence: html-sinks ratchet forbids new innerHTML writes outside @ui safeHtml. Impact: Conversation keeps line-break rendering. Unsafe links are stripped after docx and pptx preview. dompurify is deduped with the UI package. Refs: feature/sillytavern-review Co-authored-by: Cursor <cursoragent@cursor.com>
34 lines
754 B
JSON
34 lines
754 B
JSON
{
|
|
"name": "agent-system-frontend",
|
|
"private": true,
|
|
"version": "0.1.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b && vite build",
|
|
"test": "vitest run",
|
|
"preview": "vite preview"
|
|
},
|
|
"dependencies": {
|
|
"docx-preview": "^0.4.1",
|
|
"dompurify": "^3.4.16",
|
|
"jszip": "^3.10.2",
|
|
"mammoth": "^1.13.0",
|
|
"marked": "^15.0.7",
|
|
"pptx-preview": "^1.0.7",
|
|
"react": "^19.2.0",
|
|
"react-dom": "^19.2.0",
|
|
"xlsx": "^0.18.5"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^22.20.4",
|
|
"@types/react": "^19.2.0",
|
|
"@types/react-dom": "^19.2.0",
|
|
"@vitejs/plugin-react": "^4.3.4",
|
|
"knip": "^5.88.1",
|
|
"typescript": "^5.7.3",
|
|
"vite": "^6.0.11",
|
|
"vitest": "^4.1.11"
|
|
}
|
|
}
|