wmantly 6ede072213 security: swap sanitizer to xss for Jest-compatible SSR output ...

- Replace isomorphic-dompurify with xss to avoid ESM-only jsdom/htmlparser2
  transitive deps that break the existing Jest test suite.
- Keep rendered docs HTML sanitized via xss() in routes/docs.js.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 23:02:11 -04:00

..

api_token.js

Add self-service API tokens (PATs) with UI + Bearer auth (#119)

2026-07-12 17:12:38 -04:00

api.js

Add standalone backup script and admin update-check banner

2026-07-15 22:32:31 -04:00

auth.js

Address CodeQL findings on the OIDC auth flow

2026-07-10 13:22:12 -04:00

cert.js

Add OIDC login and per-domain authorization

2026-07-10 12:17:05 -04:00

dns.js

Permissions: rename Grants, add wildcards, local groups, profile

2026-07-11 10:54:15 -04:00

docs.js

security: swap sanitizer to xss for Jest-compatible SSR output

2026-07-18 23:02:11 -04:00

group.js

Permissions: rename Grants, add wildcards, local groups, profile

2026-07-11 10:54:15 -04:00

host_auth.js

Per-host SSO: Node auth endpoints + Redis session (#57)

2026-07-11 15:41:28 -04:00

host.js

Fix wildcard-parent edit greying and deprecated nginx http2 directive

2026-07-17 21:33:26 -04:00

permission.js

Permissions: rename Grants, add wildcards, local groups, profile

2026-07-11 10:54:15 -04:00

render.js

White-label: title/logo now driven by conf (closes #45)

2026-07-16 17:35:49 -04:00

update_check.js

Add standalone backup script and admin update-check banner

2026-07-15 22:32:31 -04:00

user.js

Make basic auth and SSO mutually exclusive per host; fix silently-broken validation errors

2026-07-15 00:41:16 -04:00