fix: escape `</script>` in webview content; add structured logging - #125

Merged

unknowIfGuestInDream merged 10 commits into

copilot/bugfix-empty-content-display

Aug 8, 2026

Commits on Aug 8, 2026

Initial plan
Copilot
authored
a9f9740
fix: escape </script> in webview content and add structured logging

Copilot
and
unknowIfGuestInDream
authored
9c04900
fix: remove hasValidBlocks guard; add HighContrastLight theme; null-safe bindEvents; catch init errors

Copilot
and
unknowIfGuestInDream
authored
385caeb
fix(webview): stop template literal from eating newline escapes in client script

Copilot
and
unknowIfGuestInDream
authored
6e6782d
docs(webview): correct stripGitPatchFooter comment to match regex

Copilot
and
unknowIfGuestInDream
authored
07f2fa8
refactor(webview): render diff from standalone media assets

Copilot
and
unknowIfGuestInDream
authored
7ac69e4
refactor(webview): drop misleading nonce on JSON data block; clarify test

Copilot
and
unknowIfGuestInDream
authored
5dc1bda
Potential fix for pull request finding 'CodeQL / Missing origin verification in `postMessage` handler'

unknowIfGuestInDream
and
github-advanced-security[bot]
authored
2497d57
fix(webview): vendor diff2html assets so the viewer always renders

Copilot
and
unknowIfGuestInDream
authored
23a3857
docs(changelog): note vendored diff2html assets and render test

Copilot
and
unknowIfGuestInDream
authored
a40d253