Commit Graph

4 Commits

Author SHA1 Message Date
sickn33
ed416bb85c perf(web-app): Lazy load route pages
Lazy load the home and skill detail routes so markdown and
syntax-highlighting code do not inflate the initial app bundle.

Keep behavior unchanged while splitting the web app into smaller
chunks and clearing the Vite large-bundle warning.
2026-03-18 19:08:05 +01:00
sickn33
4883b0dbb4 fix(security): Harden skill activation and loading flows
Harden batch activation, dev refresh gating, Microsoft sync path
handling, and Jetski skill loading against command injection,
symlink traversal, and client-side star tampering.

Add regression coverage for the security-sensitive paths and
update the internal triage addendum for the Jetski loader fix.
2026-03-18 18:49:15 +01:00
sck_0
6f42d5b0a2 security: harden refresh-skills endpoint and add skills docs security gate 2026-03-15 09:51:16 +01:00
sck_0
c0c118e223 fix(security): harden markdown rendering and sync safety 2026-03-15 09:22:05 +01:00