cproudlock bf8842e1d7 applications: render Application Notes as sanitized HTML ...

The notes field is authored as HTML (the form says "HTML supported") but the
detail page interpolated it with {{ }}, so tags like <BR> showed as literal
text. Render via v-html through a DOMPurify sanitizer (utils/sanitizeHtml):
allow-list of formatting tags + links only, forces target=_blank
rel=noopener on links, strips scripts/handlers. Promote dompurify to a direct
dependency (was transitive via jspdf).

2026-07-29 10:06:18 -04:00

..

public

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

src

applications: render Application Notes as sanitized HTML

2026-07-29 10:06:18 -04:00

.gitignore

ADR-013 Phase 4: frontend staging machinery + relocate printedparts; fix router crash

2026-07-18 23:42:43 -04:00

CLAUDE.md

Phase 0: lock platform contract, naming convention, and style enforcement

2026-05-08 14:47:30 -04:00

index.html

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

package-lock.json

shopfloor dashboard: Verdana font + full left-edge type-color bar

2026-07-20 16:01:58 -04:00

package.json

applications: render Application Notes as sanitized HTML

2026-07-29 10:06:18 -04:00

vite.config.js

Support subpath IIS deployment as a second install method

2026-07-13 16:11:12 -04:00

vitest.config.js

ADR-013 Phase 4: relocate 4 self-contained plugin frontends

2026-07-18 23:51:23 -04:00