Alpamys 0f8a0da222 fix(security): apply escapeHtml to all server-supplied innerHTML injections ... Wrap all server-returned values (run IDs, model names, experiment names, task names, device names, error messages, PIDs, eval results, template names, recipe names) with escapeHtml() before interpolating into innerHTML template literals. Prevents stored XSS via malicious model/experiment names.		2026-04-07 19:56:51 +05:00
..
static	fix(security): apply escapeHtml to all server-supplied innerHTML injections	2026-04-07 19:56:51 +05:00
__init__.py	Add Web UI for experiment management (Phase 8) — v0.7.0	2026-03-23 20:55:22 +05:00
app.py	fix(security): harden chat proxy SSRF with ipaddress.is_loopback validation	2026-04-07 19:28:08 +05:00