• Joined on 2021-01-05
jknapp created branch headcode-and-minors in cloud-hosting-pla…/site-builder 2026-07-13 01:36:56 +00:00
jknapp pushed to headcode-and-minors at cloud-hosting-pla…/site-builder 2026-07-13 01:36:56 +00:00
bf4a9f48eb security: block data:image/svg+xml + sandbox HtmlBlock iframes
86455413d0 fix: unique addPage ids + collision-free scopeId hashing
0cbc58f8d1 a11y/security: scope Navbar ids + hover styles, Gallery lightbox focus trap
92841e3f35 feat(builder): send + restore site head code in save/load
Compare 4 commits »
jknapp merged pull request cloud-hosting-pla…/site-builder#3 2026-07-13 01:13:28 +00:00
Site builder: security & data-loss hardening + unified asset picker + audit backlog
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-13 01:13:28 +00:00
e892ee0e53 Merge PR #3: site builder security & data-loss hardening + asset picker + audit backlog
591a51dcc2 fix(builder): escape/allowlist all attribute-value sinks incl. numeric/enum props (XSS)
7ba91d9829 fix(builder): sanitize non-string style values + allowlist element tags (XSS)
e12fb89ada Fix M-4: punctuation-only page name yields empty slug ('.html')
25507cb57a Fix INT: ContentSlider Slides editor wrote wrong prop key (image vs imageSrc)
Compare 62 commits »
jknapp pushed to builder-hardening-2026-07 at cloud-hosting-pla…/site-builder 2026-07-13 01:13:13 +00:00
591a51dcc2 fix(builder): escape/allowlist all attribute-value sinks incl. numeric/enum props (XSS)
7ba91d9829 fix(builder): sanitize non-string style values + allowlist element tags (XSS)
e12fb89ada Fix M-4: punctuation-only page name yields empty slug ('.html')
25507cb57a Fix INT: ContentSlider Slides editor wrote wrong prop key (image vs imageSrc)
9d3bbc2c46 Fix I-2: dangling parent on shell/ColumnLayout-rooted AI-replace trees
Compare 7 commits »
jknapp created pull request cloud-hosting-pla…/site-builder#3 2026-07-13 00:15:41 +00:00
Site builder: security & data-loss hardening + unified asset picker + audit backlog
jknapp created branch builder-hardening-2026-07 in cloud-hosting-pla…/site-builder 2026-07-13 00:15:17 +00:00
jknapp pushed to builder-hardening-2026-07 at cloud-hosting-pla…/site-builder 2026-07-13 00:15:17 +00:00
36c3b2f503 fix(builder): sanitize CSS-value sinks to prevent style/<style> breakout XSS
5acf172511 docs(builder): update CLAUDE.md for hardening branch (remove dead settings/zones, asset picker)
ebb8fe1027 refactor(builder): type the AI-response/patch boundary
b88b242b6a refactor(builder): extract shared Modal component for the three editor modals
8f51b5144a refactor(builder): extract shared ArrayItemFieldsEditor from SectionTypePanel/GenericPropsEditor
Compare 10 commits »
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-10 20:11:18 +00:00
97cb439508 site-builder: fix Menu guided panel (empty Colors) + surface layout/nav colors
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-08 00:19:40 +00:00
d20b77e66d site-builder: dedicated Features editor in guided panel (per-card icon/image+upload/button, robust to template items missing keys)
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-07 21:16:16 +00:00
5a26e4ef43 site-builder: FeaturesGrid renders image when 'image' set + expose image/button keys so the guided array editor edits them
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-07 21:06:25 +00:00
1cfb51f181 site-builder: surface Spotify/Twitch + contact-form recipient in the Styles (guided) panel
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-07 20:50:47 +00:00
814ad29b91 Merge branch 'site-builder-feedback-batch'
53c40f856f site-builder: feedback batch (social, features, header menu, spacer)
Compare 2 commits »
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-07 20:35:21 +00:00
b9c5d3dd1c site-builder: relay wiring on FormContainer (template forms) + shared helper
jknapp pushed to main at cloud-hosting-pla…/site-builder 2026-07-07 19:35:29 +00:00
6b9c258d26 Merge pull request 'ContactForm relay wiring (recipient, thank-you, honeypot, marker)' (#2) from contact-form-relay into main
4877a63a3b site-builder: pin non-relay byte-identity on the realistic (non-empty fields) case [PR #2 review]
cf5d30382a site-builder: ContactForm non-relay output byte-identical (honeypot whitespace fix) + test guard
66117d375e site-builder: ContactForm relay wiring (recipient, thank-you, honeypot, marker)
Compare 4 commits »
jknapp merged pull request cloud-hosting-pla…/site-builder#2 2026-07-07 19:35:28 +00:00
ContactForm relay wiring (recipient, thank-you, honeypot, marker)
jknapp pushed to contact-form-relay at cloud-hosting-pla…/site-builder 2026-07-07 19:22:30 +00:00
4877a63a3b site-builder: pin non-relay byte-identity on the realistic (non-empty fields) case [PR #2 review]
jknapp commented on pull request cloud-hosting-pla…/site-builder#2 2026-07-07 19:07:20 +00:00
ContactForm relay wiring (recipient, thank-you, honeypot, marker)

Review: ContactForm relay wiring (contact-form-relay → main)

jknapp created pull request cloud-hosting-pla…/site-builder#2 2026-07-07 19:02:48 +00:00
ContactForm relay wiring (recipient, thank-you, honeypot, marker)
jknapp created branch contact-form-relay in cloud-hosting-pla…/site-builder 2026-07-07 19:02:17 +00:00