jreakin 4c2b3b86f0 fix(web): MermaidDiagram XSS, isSafeId allows @, rawMermaid typed ... - Add DOMPurify.sanitize() to MermaidDiagram.tsx dangerouslySetInnerHTML (was rendering AI-generated SVG unsanitized — the highest-risk surface) - Add @ to isSafeId regex for scoped npm packages (@angular/core, etc.) - Add rawMermaid to ProcessData interface, remove (process as any) casts - Update security tests: @scope/pkg now accepted, @angular/core added Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-23 05:01:57 -05:00
..
bug-fixes.test.ts	test: add positive and negative tests for all 4 bug fixes	2026-03-23 03:48:27 -05:00
security-guards.test.ts	fix(web): MermaidDiagram XSS, isSafeId allows @, rawMermaid typed	2026-03-23 05:01:57 -05:00