wizardchen d46a51cf6e fix(security): forbid <style> in sanitized document HTML ...

DOMPurify was configured with USE_PROFILES.svg, which implicitly allows
<style> tags so that inline SVG styling works. User-authored markdown
rendered via v-html therefore let a pasted nginx error page's
<style>body { width: 35em; margin: 0 auto }</style> through the
sanitizer and apply as global CSS, squashing the entire app layout.

Add 'style' to FORBID_TAGS so top-level style elements from document
content are dropped regardless of the SVG profile.

2026-05-06 16:41:20 +08:00

..

packages

chore: Update Dockerfile and package-lock.json for xlsx package management

2025-11-17 13:15:10 +08:00

public

fix(frontend): bundle tdesign-icons sprite locally for offline deploys

2026-04-23 18:21:49 +08:00

src

fix(security): forbid <style> in sanitized document HTML

2026-05-06 16:41:20 +08:00

.dockerignore

fix: ignore non-utf8 words when saving to db

2025-08-21 19:53:54 +08:00

.gitignore

init commit

2025-08-05 15:08:07 +08:00

docker-entrypoint.sh

feat: support remote backend and HTTPS proxy

2026-02-09 17:58:35 +08:00

Dockerfile

feat: standardize storage configuration and enhance backward compatibility

2026-03-02 21:21:49 +08:00

env.d.ts

init commit

2025-08-05 15:08:07 +08:00

index.html

fix(frontend): bundle tdesign-icons sprite locally for offline deploys

2026-04-23 18:21:49 +08:00

nginx.conf

refactor: improve Nginx configuration for file handling

2026-03-03 22:23:23 +08:00

package-lock.json

chore: release v0.5.1

2026-04-30 17:44:26 +08:00

package.json

chore: release v0.5.1

2026-04-30 17:44:26 +08:00

package.json.md5

fix: update environment configuration for debugging and logging, enhance SQLite FTS5 table management, and improve API base URL handling

2026-04-11 18:51:16 +08:00

tsconfig.app.json

init commit

2025-08-05 15:08:07 +08:00

tsconfig.json

init commit

2025-08-05 15:08:07 +08:00

tsconfig.node.json

init commit

2025-08-05 15:08:07 +08:00

vite.config.ts

recover vite config

2026-03-30 11:34:49 +08:00