Josh Knapp bd15a33984 sitesmith: harden HtmlBlock with DOMPurify + add Vitest setup ...

Closes XSS hole in HtmlBlock by sanitizing user/AI-supplied markup
through DOMPurify before passing to dangerouslySetInnerHTML. Adds
Vitest + jsdom for unit testing with 5 passing tests covering script
stripping, on-event handler removal, javascript: URL blocking, iframe
allowlist, and form/input stripping.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-23 14:13:42 -07:00

api

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

craft

sitesmith: harden HtmlBlock with DOMPurify + add Vitest setup

2026-05-23 14:13:42 -07:00

css

fix(image-radius): split out 3x-scale IMAGE_RADIUS_PRESETS for the image picker

2026-04-27 05:18:31 -07:00

docs/plans

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

js

fix(image-radius): split out 3x-scale IMAGE_RADIUS_PRESETS for the image picker

2026-04-27 05:18:31 -07:00

storage

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

templates

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

tests

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

vendor

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

.dockerignore

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

.gitignore

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

.htaccess

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

.user.ini

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

ANCHOR_VISIBILITY.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

CLAUDE.md

fix(image-radius): split out 3x-scale IMAGE_RADIUS_PRESETS for the image picker

2026-04-27 05:18:31 -07:00

clear-data.html

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

deploy.sh

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

docker-compose.yml

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

docker-manage.sh

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

DOCKER.md

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

Dockerfile

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

ERROR_153_INFO.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

FEATURES.md

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

FIXES_2026-02-22.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

FIXES_COMPLETE.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

FIXES_FINAL_2026-02-22.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

HEADING_LEVEL_FEATURE.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

index.html

fix(image-radius): split out 3x-scale IMAGE_RADIUS_PRESETS for the image picker

2026-04-27 05:18:31 -07:00

MANUAL_TEST_RESULTS.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

media-category.png

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

package-lock.json

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

package.json

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

playwright.config.js

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

preview.html

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

router.php

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

screenshot-media.js

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

TEMPLATE_UI_FIX.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

test-anchor-editable.html

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

test-anchor-manual.sh

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

test-anchor-visibility.html

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

test-embed.html

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

test.html

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

TESTING_GUIDE.md

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

TESTING_RESULTS.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

TESTING_TEMPLATES.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

VIDEO_BACKGROUND_GUIDE.md

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

VIDEO_BG_FIX.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

VIDEO_DEBUG_GUIDE.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

WHP_INTEGRATION.md

Initial commit: Site Builder with PHP API backend

2026-02-28 19:25:42 +00:00

WINDOWS_EXPORT_FIX.md

Add templates, tests, and miscellaneous project files

2026-03-01 14:15:58 -08:00

Description

Visual drag-and-drop website builder using GrapesJS

1.5 MiB

Languages

TypeScript 52%

HTML 21.7%

JavaScript 21.5%

CSS 3.4%

PHP 1%

Other 0.4%