WeiCHENandCursor 545765c409 fix(web): escape HTML in chat markdown rendering ...

Prevent self-XSS when chat bubbles render user/LLM markdown via
dangerouslySetInnerHTML by escaping raw HTML after math/code
extraction and sanitizing link href schemes.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-13 02:50:20 +00:00

..

authIntegration.test.ts

docs(test): archive auth and dual settings test report

2026-09-13 02:50:20 +00:00

autoNumber.test.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-13 02:50:19 +00:00

autoNumber.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-13 02:50:19 +00:00

blockToMarkdown.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-13 02:50:19 +00:00

cardActionEngine.test.ts

feat(web): integrate interactive cards into chat stream and wire docgov actions

2026-09-13 02:50:19 +00:00

cardActionEngine.ts

feat(web): integrate interactive cards into chat stream and wire docgov actions

2026-09-13 02:50:19 +00:00

converters.test.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-13 02:50:19 +00:00

deliverableCategories.test.ts

refactor(types): extend deliverable item with projectId and isTemplateOnly

2026-09-13 02:50:19 +00:00

docxRenderer.ts

refactor(types): extend deliverable item with projectId and isTemplateOnly

2026-09-13 02:50:19 +00:00

markdownToBlock.ts

fix(doc): 完善文档系统各层级标题、图表公式与有序列表自动编号引擎

2026-09-13 02:50:19 +00:00

projectTemplateIntegration.test.ts

test(engine): add integration tests and archive test report for project template cloning

2026-09-13 02:50:20 +00:00

rbac.test.ts

feat(web): add LoginView and FirstLoginPasswordModal components

2026-09-13 02:50:20 +00:00

rbac.ts

feat(rbac): implement permission evaluation engine and unit test suite

2026-09-13 02:50:20 +00:00

rbacIntegration.test.ts

feat(web): wire rbac permission enforcement into left rail and rights modal

2026-09-13 02:50:20 +00:00

renderers.test.ts

fix(engine): 修复 DOCX 公式因 undefined 虚根在 Word 中丢失的缺陷

2026-09-13 02:50:19 +00:00

renderMarkdown.test.ts

fix(web): escape HTML in chat markdown rendering

2026-09-13 02:50:20 +00:00

renderMarkdown.ts

fix(web): escape HTML in chat markdown rendering

2026-09-13 02:50:20 +00:00

templateFactory.test.ts

feat(engine): add project template cloning factory and unit tests

2026-09-13 02:50:19 +00:00

templateFactory.ts

feat(engine): add project template cloning factory and unit tests

2026-09-13 02:50:19 +00:00

xlsxRenderer.ts

feat(engine): 实现 DOCX 与 XLSX 客户端原生渲染导出引擎

2026-09-13 02:50:19 +00:00