Marcus Quinn e1ee99ac9c fix: validate type parameter against allow-list in showMessage (#83) ...

Adds allow-list validation for the 'type' parameter in showMessage()
to prevent class injection vulnerabilities. The type is now checked
against ['success', 'error'] before being passed to addClass(), with
a safe fallback to 'error' for any unexpected values.

Addresses review feedback from PR #47 (gemini-code-assist finding).
Closes #76

2026-03-17 19:33:04 +00:00

..

admin-scripts.js

chore: improve workflow names and fix CSS indentation consistency (#18)

2026-03-16 18:40:09 +00:00

update-source-selector.js

fix: validate type parameter against allow-list in showMessage (#83)

2026-03-17 19:33:04 +00:00