Haileyesus 6d5ed6fdd8 fix(code-editor): harden media preview against SVG XSS and improve a11y ...

Withhold the open-in-new-tab action for SVG previews. The link is a
top-level navigation to a blob URL, which inherits the app's origin, so
a user-controlled SVG containing <script> would execute as same-origin
script. Inline <img> rendering is unaffected and stays available.

Also give the icon-only header actions (open-in-new-tab, fullscreen
toggle, close) explicit aria-labels and mark their decorative SVG icons
aria-hidden, so screen readers announce each action instead of relying
on title alone.

2026-06-29 15:16:13 +03:00

..

components

fix(code-editor): harden media preview against SVG XSS and improve a11y

2026-06-29 15:16:13 +03:00

constants

Refactor provider/session architecture to be DB-driven, modular, and sessionId-first across backend and frontend (#715)

2026-04-30 08:19:26 +02:00

contexts

feat(chat): unify session gateway with stable IDs and a single WS protocol

2026-06-11 18:47:19 +03:00

hooks

fix: voice tts format settings (#919)

2026-06-26 16:06:40 +02:00

i18n

feat(file-viewer): preview media files inline instead of showing "binary file"

2026-06-28 19:06:47 +00:00

lib

fix: voice tts format settings (#919)

2026-06-26 16:06:40 +02:00

shared/view/ui

Create command palette and add new features for search and actions (#728)

2026-04-30 14:48:48 +03:00

stores

fix: resolve session provider on backend reads

2026-06-15 14:04:50 +03:00

types

Add browser use as MCP to providers (#889)

2026-06-17 22:06:17 +02:00

utils

feat: play sound for pending tool requests (#918)

2026-06-25 14:57:10 +02:00

App.tsx

Fix/router basename root prefix (#815)

2026-06-01 22:45:57 +02:00

index.css

refactor: new settings page design and new pill component

2026-03-10 21:02:32 +00:00

main.jsx

feat: introduce notification system and claude notifications (#450)

2026-03-13 18:59:09 +03:00

vite-env.d.ts

feat: setup TypeScript with configuration and type definitions

2026-01-30 17:19:45 +01:00