corey/push-tx
1
0 Fork 0
mirror of https://github.com/Coldcard/push-tx.git synced 2026-10-22 00:33:05 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
23 Commits 2 Branches 0 Tags
128c7e78666bb3775c9d6496c3da005a9cd9c067
Commit Graph
1 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
@Bibo-dochex 128c7e7866 fix: remediate DOM-based XSS in PushTX 
- Refactor renderMessage to return HTMLElement and accept Node content
- Add textMessage helper for plain-text messages
- Replace innerHTML assignments with replaceChildren + DOM APIs
- Stop reflecting raw network parameter in parseFragment error
- Convert provider-error HTML construction to ProviderErrorsError class
- Escape API-returned values in renderTxDetails via textContent
- Add restrictive CSP meta tag to index.html
- Rebuild website and single-file artifacts
- Regenerate SHA256SUMS
 2026-08-31 12:20:20 -04:00