MichaelandClaude Haiku 4.5 9bf95b4ac9 security: sanitize episode HTML with DOMPurify (XSS) ...

Episode descriptions came from third-party RSS feeds and were rendered
via dangerouslySetInnerHTML without sanitization. Wrap with DOMPurify
using a whitelist of safe tags/attrs and an http(s)/mailto-only URI
regex.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

2026-04-18 07:25:29 +02:00

..

public

feat: add trending podcasts discovery page with genre filtering and subscription support

2026-04-16 16:24:43 +02:00

src

security: sanitize episode HTML with DOMPurify (XSS)

2026-04-18 07:25:29 +02:00

eslint.config.js

Migre eslint v8 → v9 (flat config), supprime les dépréciations

2026-04-16 11:27:46 +02:00

index.html

feat: add trending podcasts discovery page with genre filtering and subscription support

2026-04-16 16:24:43 +02:00

package-lock.json

security: sanitize episode HTML with DOMPurify (XSS)

2026-04-18 07:25:29 +02:00

package.json

security: sanitize episode HTML with DOMPurify (XSS)

2026-04-18 07:25:29 +02:00

postcss.config.js

feat: initialize Podcastic project foundation - setup backend and frontend

2026-04-16 09:53:36 +02:00

tailwind.config.js

feat: light/dark theme (cream+gold+grey), reduced radii, stagger animations, search fallback

2026-04-17 10:51:21 +02:00

tsconfig.json

feat: initialize Podcastic project foundation - setup backend and frontend

2026-04-16 09:53:36 +02:00

tsconfig.node.json

feat: initialize Podcastic project foundation - setup backend and frontend

2026-04-16 09:53:36 +02:00

vite.config.ts

fix: single container without nginx — Express serves frontend

2026-04-16 10:43:06 +02:00