Claude/audit dependabot setup xfl71#15

Merged

EthanThePhoenix38 merged 10 commits intomainfrom

claude/audit-dependabot-setup-Xfl71

Jan 8, 2026

Commits on Jan 8, 2026

chore: remove utm parameters - links now direct and clean
claude
committed
chore: replace broken github.io links with direct GitHub repository links
claude
committed
fix: remove security vulnerabilities - no external shields, no personal data exposure, safe markdown links only
claude
committed
fix: restore shields.io badges - they are needed
claude
committed
security: fix XSS vulnerability - properly escape HTML entities in article titles and summaries
claude
committed
security: use DOMPurify instead of regex for bulletproof HTML sanitization
claude
committed
security: properly validate article URL before iframe assignment - prevent XSS
claude
committed
security: use crypto.getRandomValues() instead of Math.random() for session ID generation
claude
committed
chore: add security guidelines, vercel config, package.json metadata, and CSP headers
claude
committed
Merge branch 'main' into claude/audit-dependabot-setup-Xfl71
EthanThePhoenix38
authored