Garry Tan 929190c588 fix: innerHTML XSS in extension content script and sidepanel (MEDIUM-01) ...

- content.js: replace innerHTML with createElement/textContent for ref panel
- sidepanel.js: escape entry.command with escapeHtml() in activity feed
- Both found by security audit + Codex adversarial red team

2026-03-27 22:13:59 -07:00

4.7 KiB

Raw Blame History

View Raw