6 Commits

Author	SHA1	Message	Date
Stanko K.R.	eab554aa4b	Adapt the Lexxy composer to main's link preview hardening ... Main strips a javascript: href from a preview node before it's parsed, so tell legacy Trix attachments apart by their filename instead. escapeHTML moved to the string helpers, and the unfurling system test now drives the Lexxy editor.	2026-09-26 09:26:53 +02:00
Stanko K.R.	c38e77a897	Ensure backwards compatibility with Trix	2026-09-26 09:13:35 +02:00
Stanko K.R.	47bc5f5425	Replace Trix with Lexxy	2026-09-26 09:13:27 +02:00
Rosa Gutierrez	e6022a52c3	Assert only that the preview image gained no extra attributes ... Pinning the exact attribute set also pinned which of them Trix's own sanitizer keeps, which is not what this test is about. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0186eyzivcTn6wqjEE4Wnxdt	2026-09-11 21:10:57 +02:00
Rosa Gutierrez	c1ad057db8	Escape the OpenGraph image URL in link previews ... Pasting a link builds the preview by interpolating the unfurled metadata into an HTML string. The image URL went into src="..." unescaped, so a page whose og:image carries a double quote closes the attribute early and everything after it becomes attributes on the preview's img element. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0186eyzivcTn6wqjEE4Wnxdt	2026-09-11 21:10:57 +02:00
Kevin McConnell	df76a227dc	Hello world ... First open source release of Campfire 🎉	2025-08-21 09:31:59 +01:00