oikos

openclaw/oikos

Fork 0

Commit Graph

Author	SHA1	Message	Date
Konrad M.	209b75f408	feat(utils): add fmtLocation to normalize ICS LOCATION strings for display Strips RFC 5545 backslash-escapes (\n, \,, \;, \\) and collapses semicolons and newlines into comma-separated inline text.	2026-04-21 22:18:14 +02:00
Ulas	6bc4c46f03	fix(security): eliminate XSS vectors and restore zoom accessibility - Extract shared esc() utility (public/utils/html.js) replacing 8 duplicate escHtml() functions across all page modules - Apply HTML escaping to all user-controlled data in innerHTML templates: titles, names, locations, descriptions, colors, notes content, weather data, autocomplete suggestions - Remove user-scalable=no and maximum-scale=1 from viewport meta tag, restoring pinch-to-zoom for WCAG 1.4.4 compliance - Bump version to 0.7.1	2026-04-04 06:25:28 +02:00

Author

SHA1

Message

Date

Konrad M.

209b75f408

feat(utils): add fmtLocation to normalize ICS LOCATION strings for display

Strips RFC 5545 backslash-escapes (\n, \,, \;, \\) and collapses
semicolons and newlines into comma-separated inline text.

2026-04-21 22:18:14 +02:00

Ulas

6bc4c46f03

fix(security): eliminate XSS vectors and restore zoom accessibility

- Extract shared esc() utility (public/utils/html.js) replacing 8
  duplicate escHtml() functions across all page modules
- Apply HTML escaping to all user-controlled data in innerHTML
  templates: titles, names, locations, descriptions, colors, notes
  content, weather data, autocomplete suggestions
- Remove user-scalable=no and maximum-scale=1 from viewport meta
  tag, restoring pinch-to-zoom for WCAG 1.4.4 compliance
- Bump version to 0.7.1

2026-04-04 06:25:28 +02:00

2 Commits