Marcel Raddatz 4c87d9c134 feat(planner): sanitize heroImageUrl before embedding in CSS url() ...

Extracts sanitizeForCssUrl helper that strips '"()\ before the URL
is embedded in url("..."). Prevents CSS injection via the hero image
field in inline style bindings.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-10 14:16:10 +02:00

..

e2e

feat(recipes): add image upload, fix save 500, seed HelloFresh data

2026-04-09 20:23:28 +02:00

src

feat(planner): sanitize heroImageUrl before embedding in CSS url()

2026-04-10 14:16:10 +02:00

static

feat(recipes): add image upload, fix save 500, seed HelloFresh data

2026-04-09 20:23:28 +02:00

.gitignore

feat(recipes): add image upload, fix save 500, seed HelloFresh data

2026-04-09 20:23:28 +02:00

.npmrc

feat(recipes): add image upload, fix save 500, seed HelloFresh data

2026-04-09 20:23:28 +02:00

Dockerfile

Wire frontend into Docker Compose with type-safe API client

2026-04-02 12:36:09 +02:00

package-lock.json

feat(auth): add SignupForm component with validation and password toggle

2026-04-02 14:45:54 +02:00

package.json

feat(auth): add SignupForm component with validation and password toggle

2026-04-02 14:45:54 +02:00

playwright.config.ts

feat(recipes): add image upload, fix save 500, seed HelloFresh data

2026-04-09 20:23:28 +02:00

svelte.config.js

Wire frontend into Docker Compose with type-safe API client

2026-04-02 12:36:09 +02:00

tsconfig.json

feat(design-system): add Tailwind 4 @theme tokens, fonts, and completeness tests

2026-04-02 12:45:11 +02:00

vite.config.ts

refactor(config): document resolve.conditions safety for SSR builds

2026-04-02 13:52:23 +02:00