WeiCHENandCursor 0c7d974ae2 fix(web): escape HTML in chat markdown rendering ...

Prevent self-XSS when chat bubbles render user/LLM markdown via
dangerouslySetInnerHTML by escaping raw HTML after math/code
extraction and sanitizing link href schemes.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-09 17:48:12 +08:00

..

authIntegration.test.ts

docs(test): archive auth and dual settings test report

2026-09-08 23:32:15 +08:00

autoNumber.test.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-08 17:41:59 +08:00

autoNumber.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-08 17:41:59 +08:00

blockToMarkdown.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-08 17:41:59 +08:00

cardActionEngine.test.ts

feat(web): integrate interactive cards into chat stream and wire docgov actions

2026-09-08 18:58:21 +08:00

cardActionEngine.ts

feat(web): integrate interactive cards into chat stream and wire docgov actions

2026-09-08 18:58:21 +08:00

converters.test.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-08 17:41:59 +08:00

deliverableCategories.test.ts

refactor(types): extend deliverable item with projectId and isTemplateOnly

2026-09-08 20:35:04 +08:00

docxRenderer.ts

refactor(types): extend deliverable item with projectId and isTemplateOnly

2026-09-08 20:35:04 +08:00

markdownToBlock.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-08 17:41:59 +08:00

projectTemplateIntegration.test.ts

test(engine): add integration tests and archive test report for project template cloning

2026-09-08 20:42:15 +08:00

rbac.test.ts

feat(web): add LoginView and FirstLoginPasswordModal components

2026-09-08 23:23:49 +08:00

rbac.ts

feat(rbac): implement permission evaluation engine and unit test suite

2026-09-08 22:31:50 +08:00

rbacIntegration.test.ts

feat(web): wire rbac permission enforcement into left rail and rights modal

2026-09-08 22:40:22 +08:00

renderers.test.ts

fix(engine): 修复 DOCX 公式因 undefined 虚根在 Word 中丢失的缺陷

2026-09-08 20:37:28 +08:00

renderMarkdown.test.ts

fix(web): escape HTML in chat markdown rendering

2026-09-09 17:48:12 +08:00

renderMarkdown.ts

fix(web): escape HTML in chat markdown rendering

2026-09-09 17:48:12 +08:00

templateFactory.test.ts

feat(engine): add project template cloning factory and unit tests

2026-09-08 20:36:02 +08:00

templateFactory.ts

feat(engine): add project template cloning factory and unit tests

2026-09-08 20:36:02 +08:00

xlsxRenderer.ts

feat(engine): 实现 DOCX 与 XLSX 客户端原生渲染导出引擎

2026-09-08 18:09:43 +08:00