dadaloop82
d33b0ca2fe
Block web access to sensitive paths, require API_TOKEN for mutations, encrypt GitHub issue credentials in .env, auto-provision tokens for same-origin clients, and pass api_token in scale relay URLs since EventSource cannot send headers. Co-authored-by: Cursor <cursoragent@cursor.com>
12 lines
275 B
JavaScript
12 lines
275 B
JavaScript
/**
|
|
* EverShelf core — safe HTML escaping (loaded before app.js).
|
|
*/
|
|
function escapeHtml(str) {
|
|
if (str == null) return '';
|
|
const div = document.createElement('div');
|
|
div.textContent = String(str);
|
|
return div.innerHTML;
|
|
}
|
|
|
|
window.escapeHtml = escapeHtml;
|