Marcel fa7b97acdc test(PersonMentionEditor): assert no HTML injection via mention displayName ...

Adds a CWE-79 regression test: a sidecar entry whose displayName contains
an <img onerror=alert(1)> payload must round-trip through deserialize and
the Tiptap renderHTML without producing a real <img> element in the editor
DOM. Locks down the "renderHTML's third tuple entry is a text node, never
parsed as HTML" invariant so a future "use innerHTML for performance"
refactor cannot silently regress.

Nora #5618 detection-gap concern.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-29 16:14:19 +02:00

..

actions

fix(persons): keyboard navigation now updates PersonTypeSelector reactive state

2026-04-26 13:37:34 +02:00

assets

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

components

test(PersonMentionEditor): assert no HTML injection via mention displayName

2026-04-29 16:14:19 +02:00

generated

chore(frontend): regenerate api.ts for PersonMention sidecar + PERSON_RENAME_CONFLICT

2026-04-28 21:10:54 +02:00

hooks

test(autosave): observe saving→saved transition in B12 retry path

2026-04-29 01:18:43 +02:00

ocr

test(ocr): guard translateOcrProgress fallback for PREPROCESSING_PAGE with missing colon parts

2026-04-17 15:13:52 +02:00

server

test(i18n): add unit tests for locale detection + extract to module

2026-03-19 20:34:40 +01:00

services

refactor(confirm): use plain let for resolveRef instead of $state

2026-04-12 14:34:52 +02:00

stores

test(bulk-edit): plug Sara's identified coverage gaps

2026-04-25 16:58:48 +02:00

types

refactor(person-mention): hoist LoadState + HoverData into shared types module

2026-04-29 08:46:42 +02:00

utils

refactor(frontend): delete orphaned personMention.ts after Tiptap migration

2026-04-29 16:09:53 +02:00

api.server.ts

fix(frontend): enforce lint locally and in CI, fix all pre-existing violations

2026-03-20 15:55:42 +01:00

errors.ts

feat(frontend): add Tiptap renovate group, i18n keys, fix geb. literal, remove rename-conflict

2026-04-29 15:00:13 +02:00

index.ts

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

person-validation.test.ts

fix(persons): localize validation error messages via Paraglide i18n

2026-04-26 13:37:34 +02:00

person-validation.ts

refactor(persons): extract inputCls/labelCls and PersonFormData type

2026-04-26 13:37:34 +02:00

relationshipLabels.test.ts

refactor(stammbaum): extract chipLabel/otherName to shared relationshipLabels helper

2026-04-28 19:32:17 +02:00

relationshipLabels.ts

refactor(stammbaum): extract chipLabel/otherName to shared relationshipLabels helper

2026-04-28 19:32:17 +02:00

relativeTime.spec.ts

feat(relativeTime): add relativeYearsDe helper for historical letter dates

2026-04-23 21:38:56 +02:00

relativeTime.ts

feat(relativeTime): add relativeYearsDe helper for historical letter dates

2026-04-23 21:38:56 +02:00

search.spec.ts

test(search): add applyOffsets coverage for negative start offsets

2026-04-16 09:10:10 +02:00

search.ts

feat(search): add applyOffsets utility and regenerate API types with MatchOffset/SearchMatchData

2026-04-16 09:10:10 +02:00

types.ts

feat(transcription): swap plain textarea for PersonMentionEditor and thread mentionedPersons through autosave

2026-04-29 00:32:09 +02:00

utils.spec.ts

test: add e2e tests

2026-03-17 13:34:05 +00:00

utils.ts

refactor(utils): consolidate date utilities into \$lib/utils/date.ts

2026-03-26 12:07:46 +01:00