No description
Find a file
jtricerolph dde41bc5d1 Escape HTML entities before rendering AI insight content
The renderContent() function used dangerouslySetInnerHTML without
first sanitizing the AI-generated text, allowing any HTML in the
model response to execute in the browser. Added escHtml() helper
and applied it before the bold-substitution regex.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-07-13 09:25:02 +00:00
backend Remove bookability and competitor rates — moved to Rate Monitor app 2026-07-05 12:14:26 +00:00
db Forecasting app: hybrid port to HNF stack 2026-07-04 18:49:34 +00:00
frontend Escape HTML entities before rendering AI insight content 2026-07-13 09:25:02 +00:00
.gitignore Forecasting app: hybrid port to HNF stack 2026-07-04 18:49:34 +00:00
docker-compose.yml NewBook credentials from central Settings service 2026-07-04 19:36:41 +00:00
seed-app.js Forecasting app: hybrid port to HNF stack 2026-07-04 18:49:34 +00:00