WeiCHENandCursor 545765c409 fix(web): escape HTML in chat markdown rendering ...

Prevent self-XSS when chat bubbles render user/LLM markdown via
dangerouslySetInnerHTML by escaping raw HTML after math/code
extraction and sanitizing link href schemes.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-13 02:50:20 +00:00

..

src

fix(web): escape HTML in chat markdown rendering

2026-09-13 02:50:20 +00:00

.gitignore

feat(web): initialize react 19 vite typescript scaffold and token design system

2026-09-13 02:50:19 +00:00

index.html

feat(web): initialize react 19 vite typescript scaffold and token design system

2026-09-13 02:50:19 +00:00

package-lock.json

feat(engine): 实现 DOCX 原生 OMML 数学公式、Mermaid 高清渲染与出版级公文排版

2026-09-13 02:50:19 +00:00

package.json

feat(engine): 实现 DOCX 原生 OMML 数学公式、Mermaid 高清渲染与出版级公文排版

2026-09-13 02:50:19 +00:00

tsconfig.json

feat(web): initialize react 19 vite typescript scaffold and token design system

2026-09-13 02:50:19 +00:00

vite.config.ts

feat(web): build interactive card component with lifecycle and idempotency

2026-09-13 02:50:19 +00:00