Marcus Quinn e1ee99ac9c fix: validate type parameter against allow-list in showMessage (#83) ...

Adds allow-list validation for the 'type' parameter in showMessage()
to prevent class injection vulnerabilities. The type is now checked
against ['success', 'error'] before being passed to addClass(), with
a safe fallback to 'error' for any unexpected values.

Addresses review feedback from PR #47 (gemini-code-assist finding).
Closes #76

2026-03-17 19:33:04 +00:00

..

css

fix: use standard max-width media query syntax in admin-styles.css (issue #43) (#68)

2026-03-17 01:17:05 +00:00

js

fix: validate type parameter against allow-list in showMessage (#83)

2026-03-17 19:33:04 +00:00

lib

Fix: Rename class files and apply coding standard fixes

2025-04-18 18:08:51 +01:00

templates

fix: add dialog semantics and accessible close button to update source modal (#58)

2026-03-16 23:08:09 +00:00