fs 35a36f1144 fix(security): replace innerHTML with safe DOM APIs, add destroy() cleanup ...

Replace innerHTML assignments in app-tabs.js and app-password-toggle.js
with createElement/appendChild to prevent potential XSS vectors. Add
destroy() methods to app-tabs, app-filter-drawer, and
app-toggle-aside-panels so document/window-level listeners can be
properly removed when components are torn down.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-13 22:35:01 +01:00

..

app-active-filter-chips.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-async-flash.js

topbar anpassungen

2026-03-05 12:51:53 +01:00

app-auto-submit.js

feat(security): add Content-Security-Policy headers with strict script-src

2026-03-13 19:24:10 +01:00

app-bulk-selection.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-color-default-toggle.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-confirm-actions.js

refactor: extract shared form utils, add aria-live regions and reduced-motion support

2026-03-13 22:28:46 +01:00

app-contrast-toggle.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-copy-badge.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-custom-field-options-toggle.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-details-state.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-filter-drawer.js

fix(security): replace innerHTML with safe DOM APIs, add destroy() cleanup

2026-03-13 22:35:01 +01:00

app-flash-auto-dismiss.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-fslightbox-refresh.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-global-search.js

refactor: extract shared form utils, add aria-live regions and reduced-motion support

2026-03-13 22:28:46 +01:00

app-multiselect-cascade.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-multiselect-init.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-nav-history.js

refactor: extract shared form utils, add aria-live regions and reduced-motion support

2026-03-13 22:28:46 +01:00

app-page-editor.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-password-hints.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-password-toggle.js

fix(security): replace innerHTML with safe DOM APIs, add destroy() cleanup

2026-03-13 22:35:01 +01:00

app-session-warning.js

fix(session): preserve intended URL across session timeout with remember-me

2026-03-13 18:28:13 +01:00

app-settings-telemetry.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-standard-detail-page.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-tabs.js

fix(security): replace innerHTML with safe DOM APIs, add destroy() cleanup

2026-03-13 22:35:01 +01:00

app-tenant-sso-toggle.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-tenant-switcher.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-theme-toggle.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-toggle-aside-panels.js

fix(security): replace innerHTML with safe DOM APIs, add destroy() cleanup

2026-03-13 22:35:01 +01:00

app-toggle-details-aside.js

fix: web/ quick wins — CSS cleanup, ARIA tabs, and file header comments

2026-03-13 22:21:37 +01:00

app-toggle-sidebar.js

refactor: extract shared form utils, add aria-live regions and reduced-motion support

2026-03-13 22:28:46 +01:00