public/once-campfire
1
0
Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-09-15 04:52:17 +09:00
Code Issues Packages Projects Releases Wiki Activity
220 Commits 17 Branches 11 Tags
5742dfaf73fb44f027e53cac98cf179c65c20a35
Commit Graph

3 Commits

Author SHA1 Message Date
Rosa Gutierrez 8722057545 Keep one escapeHTML, and make it safe in an attribute 
There were two: the one in dom_helpers escaped through a text node, which
leaves double quotes alone, so it could not have closed the hole in the
link preview's img src.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0186eyzivcTn6wqjEE4Wnxdt
 2026-09-11 21:10:57 +02:00
Rosa Gutierrez c1ad057db8 Escape the OpenGraph image URL in link previews 
Pasting a link builds the preview by interpolating the unfurled metadata
into an HTML string. The image URL went into src="..." unescaped, so a
page whose og:image carries a double quote closes the attribute early and
everything after it becomes attributes on the preview's img element.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0186eyzivcTn6wqjEE4Wnxdt
 2026-09-11 21:10:57 +02:00
Kevin McConnell df76a227dc Hello world 
First open source release of Campfire 🎉
 2025-08-21 09:31:59 +01:00