Garry Tan 3f53b9e173 fix(make-pdf): close offline-gate bypasses via unquoted style attrs, CSS-escape and HTML-entity obfuscation ... Three live vectors found by the ship review army, all red-first tested: unquoted style attributes skipped the remote-url neutralizer entirely; CSS ident/string escapes (@\69mport, url(\68ttps://…)) defeated the literal-match patterns Chromium happily decodes; and HTML entities in style attribute values (https) decoded to fetchable schemes before CSS parsing. Style-attr values are now entity-decoded in one browser- faithful pass, escape-bearing at-rules and function tokens are dropped fail-closed, and output is re-encoded double-quoted. 21 new test rows.		2026-08-14 17:11:48 -07:00
..
v0.15.2.0.sh	fix: top-level skill dirs so Claude discovers unprefixed names (#761)	2026-04-02 18:34:00 -07:00
v0.16.2.0.sh	feat: relationship closing — office-hours adapts to repeat users (v0.16.2.0) (#937)	2026-04-08 22:21:28 -10:00
v1.0.0.0.sh	feat: gstack v1 — simpler prompts + real LOC receipts (v1.0.0.0) (#1039)	2026-04-18 15:05:42 +08:00
v1.1.3.0.sh	fix(checkpoint): rename /checkpoint → /context-save + /context-restore (v1.0.1.0) (#1064)	2026-04-19 08:38:19 +08:00
v1.17.0.0.sh	v1.17.0.0: setup-gbrain wireup ships the gbrain federation surface (#1234)	2026-04-28 01:17:54 -07:00
v1.27.0.0.sh	fix(upgrade): v1.27 migration no longer auto-proceeds without a TTY or records a failed rename as done (#1383)	2026-08-14 12:02:29 -07:00
v1.37.0.0.sh	v1.37.0.0 feat: split-engine gbrain (remote MCP brain + local PGLite for code) (#1500)	2026-05-14 17:20:48 -07:00
v1.38.1.0.sh	v1.38.1.0 fix wave: surrogate-safe page captures (#1440), Implementation Tasks across review skills (#1454), root-level artifact patterns (#1452) (#1504)	2026-05-14 21:46:50 -07:00
v1.40.0.0.sh	v1.44.1.0 fix wave: post-windhoek paper-cut — 9 community PRs in one bundle (#1682)	2026-05-25 10:57:15 -07:00
v1.58.0.0.sh	v1.58.1.0 feat: hermetic local E2E + Conductor prose AskUserQuestion (#2004)	2026-06-14 11:40:57 -07:00
v1.64.0.0.sh	fix(browse): headed mode on macOS 26 — stop mutating the signed Chromium bundle, heal the ones we already broke (#2242, #2138, #2139)	2026-08-14 12:48:06 -07:00
v1.65.0.0.sh	fix(make-pdf): close offline-gate bypasses via unquoted style attrs, CSS-escape and HTML-entity obfuscation	2026-08-14 17:11:48 -07:00