Commit Graph
3 Commits
Author SHA1 Message Date
thzxx 0cb0d28bb4 build: 提交 dist 构建产物(v0.4.1 完整 5 格式 + sourcemap + 类型声明)
CI / test-rest (push) Successful in 9m29s
CI / e2e (push) Successful in 9m42s
CI / verify (18.x) (push) Successful in 9m54s
CI / verify (20.x) (push) Successful in 9m52s
CI / test-parser (push) Successful in 9m26s
CI / test-core (push) Successful in 9m35s
CI / verify (24.x) (push) Successful in 9m47s
2026-08-09 20:20:39 +08:00
thzxx ddc650feeb fix(security): 属性级转义防注入 + 发布产物扩展名修复
- 链接/图片 href/src/alt/title 与代码块 language 属性改用属性级转义
  (浏览器环境 escapeHTML 不转义双引号,存在属性注入面)
- 修复 title 中反斜杠转义还原,引用链接 title 输出与行内一致
- 产物改用 .mjs/.cjs 扩展名(type:module 下 .js 被 Node 按 ESM 解析,
  require() 拿不到导出);exports 指向 dist 而非 src TS 源码
- 新增 .gitattributes 强制 LF,避免 Windows CRLF 污染 diff
- 配套测试:title/URL/alt/language 注入防护
2026-08-09 08:59:19 +08:00
thzxx 22e867eda8 Initial commit: MetonaEditor v0.1.0 2026-07-23 16:23:07 +08:00