Steve Hanlon 2294c8eda7 Security hardening and accessibility improvements (v1.1.0) ...

Address findings from security audit: wrap inline JSON.parse in
try/catch to prevent consent flow failure on corrupted cookies,
allowlist admin tab parameter, clamp consent_expiry server-side,
escape all server values in admin JS table builder, fix focus trap
listener cleanup, add aria-labelledby and banner focus for screen
readers, skip frontend loading during AJAX.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-18 10:32:16 +00:00

4.9 KiB

Raw Blame History

View Raw