4 Commits

Author	SHA1	Message	Date
canglan	6657c05dec	fix: add escJs for JS string escaping in onclick attributes, apply to users/templates/notifications	2026-07-12 13:09:52 +08:00
canglan	da5aa09421	fix: escape single quotes in U.esc to prevent onclick attribute injection	2026-07-12 13:09:10 +08:00
canglan	3ec9e80e0d	fix: remove fragile setTimeout in confirm, bind handlers directly	2026-07-12 13:03:02 +08:00
canglan	247a4e851d	feat: MC Report System - MySQL + Express + Vanilla JS SPA	2026-07-12 01:23:19 +08:00