David/HERMES-GIELIE
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
HERMES-GIELIE/static
History
Nathan Esquenazi 71dd691ed0 fix: harden bot_name — crash guard, XSS escape, sanitization, tests 
- Move `import html` to module top (was inside function body)
- Fix IndexError crash in /login when bot_name is empty string;
  use `or 'Hermes'` fallback instead of .get() default which
  doesn't guard against stored empty string
- Add server-side sanitization in POST /api/settings: strip + default
  empty/whitespace bot_name to 'Hermes' before persisting
- Escape _bn initial char in ui.js innerHTML (esc() consistency)
- Add maxlength=64 to #settingsBotName input field
- Add tests/test_sprint27.py: 9 tests covering API round-trip,
  empty/whitespace defaults, login page rendering, and XSS escaping
2026-04-06 15:06:16 +00:00
..
boot.js feat: make bot name configurable 2026-04-06 05:14:31 +00:00
commands.js docs: v0.34 release — themes CHANGELOG, README, add light to picker 2026-04-04 21:13:01 -07:00
index.html fix: harden bot_name — crash guard, XSS escape, sanitization, tests 2026-04-06 15:06:16 +00:00
messages.js feat: make bot name configurable 2026-04-06 05:14:31 +00:00
panels.js feat: make bot name configurable 2026-04-06 05:14:31 +00:00
sessions.js feat: make bot name configurable 2026-04-06 05:14:31 +00:00
style.css feat: self-update checker with one-click update for WebUI + Agent 2026-04-05 09:11:44 -07:00
ui.js fix: harden bot_name — crash guard, XSS escape, sanitization, tests 2026-04-06 15:06:16 +00:00
workspace.js feat: workspace git detection with branch/status badge 2026-04-04 14:08:25 -07:00