- Escape all interpolated text in renderDiscoverSyncCard innerHTML to prevent XSS - Replace inline onclick/onchange handlers with addEventListener bindings - Remove familiar_favorites hardcoded track_count of 0, use pool_count like other personalized playlists - Guard request.get_json() against None in manage_discover_auto_update POST handler - Set push status to skipped when playlist_name is missing in _push_playlist_to_server |
||
|---|---|---|
| .. | ||
| static | ||
| index.html | ||