Émile Ré e24813202b Fix XSS in cookie banner translation rendering ...

Validate translation string values server-side with NoHTML() and
MaxLen(2000) to reject HTML in the translations JSON blob. On the
client side, escape user-provided template text before innerHTML
injection in banner_description and placeholder_text paths.

Signed-off-by: Émile Ré <emile@getprobo.com>

2026-04-24 12:18:11 +04:00

..

accessreview

Include all accounts in access-review fetch

2026-04-22 11:15:48 +02:00

agent

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

awsconfig

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

baseurl

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

bearertoken

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

bootstrap

Wire evidence-describer worker config in bootstrap

2026-04-24 08:43:14 +02:00

certmanager

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

cli

Add missing resources to CLI, MCP, and n8n surfaces

2026-04-22 19:02:22 +02:00

cmd

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

connector

Always send Bearer auth for OAuth2 connectors

2026-04-22 11:15:48 +02:00

cookiebanner

Fix XSS in cookie banner translation rendering

2026-04-24 12:18:11 +04:00

coredata

Add slug to cookie categories for stable consent identifiers

2026-04-24 12:18:10 +04:00

crypto

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

docgen

Add background PDF generation for published document versions

2026-04-23 20:50:25 +02:00

esign

Migrate workers to kit/worker

2026-04-13 12:25:42 +02:00

evidencedescriber

Add ISC license headers to Go, TypeScript, and SQL files

2026-03-31 13:31:30 +02:00

file

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

filemanager

Use file model MIME type instead of S3 content type

2026-03-26 17:34:04 +01:00

filevalidation

Fix tests

2026-03-31 19:16:56 +04:00

gid

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

html2pdf

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

iam

Handle SCIM user email rename via external ID fallback

2026-04-23 10:45:48 +02:00

llm

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

mail

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

mailer

Migrate workers to kit/worker

2026-04-13 12:25:42 +02:00

mailman

Migrate workers to kit/worker

2026-04-13 12:25:42 +02:00

net

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

page

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

pdfutils

Add background PDF generation for published document versions

2026-04-23 20:50:25 +02:00

probo

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

probod

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

prosemirror

Fix TextLength to count characters instead of bytes

2026-04-09 14:47:48 +04:00

rfc5988

Add RFC 5988 link header parser

2026-04-02 14:37:29 +02:00

saferedirect

Fix compliance page login redirect to custom domains

2026-03-31 10:51:34 +02:00

securecookie

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

securetoken

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

server

Add slug to cookie categories for stable consent identifiers

2026-04-24 12:18:10 +04:00

slack

Address code review feedback

2026-04-13 19:24:46 +02:00

slug

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

statelesstoken

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

trust

Add background PDF generation for published document versions

2026-04-23 20:50:25 +02:00

uri

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

validator

Add slug to cookie categories for stable consent identifiers

2026-04-24 12:18:10 +04:00

version

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

vetting

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

webhook

Remove meeting feature

2026-04-20 15:37:39 +02:00