github-featured / nextlevelbuilder--ui-ux-pro-max-skill

发布

0 发布 49 Git 标签

RSS 订阅源
  • v2.6.2 d457006301
    比较

    fix: HTML-escape all user data in slide generator to prevent XSS (#274)

    frostbyte_neo 发布于 2026-06-22 18:17:29 +00:00 | 104 次提交 在此版本后已推送到 main

    Add html.escape() to all 46 user-controlled data.get() calls across
    all 7 slide generator functions (title, problem, solution, metrics,
    chart, testimonial, cta) and the deck title.

    Add URL scheme validation for cta_url href to block javascript: URI
    injection.

    Closes #247

    下载附件