- Fix: "missing FROM-clause entry for table q" in quiz submission query - Security: replace broken sanitizeHtml with allowlist-based sanitizer (prevents stored XSS) - Security: whitelist table names in uniqueSlug() to prevent SQL injection pattern - Security: replace raw err.message responses with generic errors in learning routes - Security: cap admin logs query LIMIT to 500 - Refactor: break 1685-line index.html into 12 lazy-loaded component files (280 lines shell) - Speed: add preconnect hints for Google Fonts and CDN - Speed: defer all script tags for faster initial paint - Speed: lazy-load tab HTML on activation (only active tab's DOM is parsed) - Update: replace HIPAA notice with institution-guidelines cautionary note |
||
|---|---|---|
| .. | ||
| components | ||
| css | ||
| icons | ||
| js | ||
| favicon.ico | ||
| index.html | ||
| manifest.json | ||
| sw.js | ||