canglan da5aa09421 fix: escape single quotes in U.esc to prevent onclick attribute injection

2026-07-12 13:09:10 +08:00

..

pages

fix: escape notification name/url in edit modal to prevent HTML injection

2026-07-12 13:08:45 +08:00

api.js

feat: MC Report System - MySQL + Express + Vanilla JS SPA

2026-07-12 01:23:19 +08:00

app.js

fix: loadFooter only for admin, only once per session

2026-07-12 04:21:26 +08:00

auth.js

feat: MC Report System - MySQL + Express + Vanilla JS SPA

2026-07-12 01:23:19 +08:00

utils.js

fix: escape single quotes in U.esc to prevent onclick attribute injection

2026-07-12 13:09:10 +08:00