4 Commits

Include renames

Author	SHA1	Message	Date
tomaiooandGitHub	d3e32a78a2	fix(security): rendering mutable remote content from branch head (#639) ... The app fetches Markdown from `.../master/README.md`, which is a mutable branch reference. Content can change at any time and is immediately rendered client-side. This increases risk of unexpected content/script injection and makes output non-reproducible. Affected files: index.html Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com>	2026-04-15 19:39:35 +00:00
tryboiandGitHub	988b13e0be	refactor: non-responsive fixed width layout (#637) ... The CSS sets a fixed width of `960px` for the `main` element. This overrides the responsiveness intended by the viewport meta tag, causing horizontal scrolling on mobile devices or small windows. Affected files: index.html Signed-off-by: tryboi <270171460+tryboi@users.noreply.github.com>	2026-04-09 19:18:54 +00:00
Trần BáchandGitHub	67d3746f69	fix(security): theme selection via dom input without validation (#629) ... The `changeCSS` function constructs a URL by interpolating user-controlled input (`theme` parameter from the `<select>` element) directly into a CDN URL template. While the current `<select>` restricts values, if the function were called programmatically (e.g., via browser console or if the DOM is manipulated), an attacker could inject an arbitrary path into the stylesheet URL, potentially loading a malicious CSS file from the CDN. Affected files: index.html Signed-off-by: Trần Bách <45133811+barttran2k@users.noreply.github.com>	2026-04-07 18:11:14 +00:00
Shakil ShahadatandGitHub	250cac4811	Adds a HTML version of the repo (#427)	2024-08-22 15:51:00 +00:00