Ulas 6bc4c46f03 fix(security): eliminate XSS vectors and restore zoom accessibility ...

- Extract shared esc() utility (public/utils/html.js) replacing 8
  duplicate escHtml() functions across all page modules
- Apply HTML escaping to all user-controlled data in innerHTML
  templates: titles, names, locations, descriptions, colors, notes
  content, weather data, autocomplete suggestions
- Remove user-scalable=no and maximum-scale=1 from viewport meta
  tag, restoring pinch-to-zoom for WCAG 1.4.4 compliance
- Bump version to 0.7.1

2026-04-04 06:25:28 +02:00

..

html.js

fix(security): eliminate XSS vectors and restore zoom accessibility

2026-04-04 06:25:28 +02:00

ux.js

style: replace em dashes with hyphens throughout codebase

2026-04-03 17:04:39 +02:00