Agent review findings from PR #179: 1. static/ui.js line 542: extra } in ternary produced malformed HTML in message bubble div (''}} instead of ''}). Caused a literal } character to appear in the DOM. 2. api/routes.py: LOGIN_INVALID_PW and LOGIN_CONN_FAILED were inserted into JS string context without JS-string escaping. Added backslash escaping for ' and \ characters. Currently safe because locale values are hardcoded, but this prevents breakage if custom locale strings contain single quotes. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| auth.py | ||
| config.py | ||
| helpers.py | ||
| models.py | ||
| profiles.py | ||
| routes.py | ||
| state_sync.py | ||
| streaming.py | ||
| updates.py | ||
| upload.py | ||
| workspace.py | ||