Šarūnas Nejus 75f0d8f489 Fix XSS by using escaped template tags in web UI ...

Replace all `<%= %>` (unescaped) with `<%- %>` (escaped) in Underscore.js
templates to prevent cross-site scripting via music metadata fields.

2026-04-19 19:58:37 +01:00

..

static

feat(plugin/web): support for nexttrack keypress

2025-10-09 20:11:19 +03:00

templates

Fix XSS by using escaped template tags in web UI

2026-04-19 19:58:37 +01:00

__init__.py

Web plugin: add type hint for g.lib

2025-11-15 21:02:43 +01:00