wmantly 6ede072213 security: swap sanitizer to xss for Jest-compatible SSR output ...

- Replace isomorphic-dompurify with xss to avoid ESM-only jsdom/htmlparser2
  transitive deps that break the existing Jest test suite.
- Keep rendered docs HTML sanitized via xss() in routes/docs.js.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 23:02:11 -04:00

..

bin

Moved to model-redis package

2025-12-31 20:32:21 -05:00

conf

chore(release): public-release readiness fixes for 1.1.16

2026-07-18 22:02:27 -04:00

controller

Cleaned up file layout

2025-12-31 15:57:33 -05:00

middleware

Fix api-tokens date display + quiet authIO no-token log (#120)

2026-07-12 17:41:57 -04:00

migrations

Permissions: rename Grants, add wildcards, local groups, profile

2026-07-11 10:54:15 -04:00

models

chore(release): public-release readiness fixes for 1.1.16

2026-07-18 22:02:27 -04:00

public

Fix Docker sticky footer, commit hash, and configurable local admin password (#133)

2026-07-14 22:32:24 -04:00

routes

security: swap sanitizer to xss for Jest-compatible SSR output

2026-07-18 23:02:11 -04:00

services

Add standalone backup script and admin update-check banner

2026-07-15 22:32:31 -04:00

test

Fix wildcard-parent edit greying and deprecated nginx http2 directive

2026-07-17 21:33:26 -04:00

utils

security: sanitize markdown output and harden unix socket permissions

2026-07-18 22:41:47 -04:00

views

Add plain-language concept docs; fix docs viewer rendering; link API tokens

2026-07-17 22:09:53 -04:00

api.md

Add plain-language concept docs; fix docs viewer rendering; link API tokens

2026-07-17 22:09:53 -04:00

app.js

chore(release): public-release readiness fixes for 1.1.16

2026-07-18 22:02:27 -04:00

package-lock.json

security: swap sanitizer to xss for Jest-compatible SSR output

2026-07-18 23:02:11 -04:00

package.json

security: swap sanitizer to xss for Jest-compatible SSR output

2026-07-18 23:02:11 -04:00