- **Description:** Implemented all core quality bug fixes and security hardening from the 10-agent independent quality audit. Added cryptographic SHA-384 Subresource Integrity (SRI) hashes to all external CDN script and stylesheet link tags inside `index.html`. Tightened Neutralino desktop API permissions allowlist (`nativeAllowList`) to exactly 8 required endpoints following the Principle of Least Privilege. Upgraded the desktop prepare compiler (`prepare.js`) to bundle 19 minified scripts, styles, and woff2/woff icon webfonts locally, ensuring complete 100% offline-first application execution. Intercepted file downloads/uploads inside the desktop port to use native platform file dialogue prompts (`Neutralino.os.showOpenDialog`, `Neutralino.os.showSaveDialog`) and local reads/writes (`Neutralino.filesystem`). Replaced abrupt window exit in `desktop-app/resources/js/main.js` with confirmation prompts (`Neutralino.os.showMessageBox`) to safeguard unsaved documents. Resolved mouse pointer drag lag on editor resizing by dynamically disabling container pointer-events. Added WAI-ARIA tab list controls conforming to WCAG 2.1 AA keyboard accessibility with manual selection and roving tabindex. Corrected standalone HTML export footnote rendering and reference link injections, packaging missing styles for footnotes, math equations, and Mermaid diagrams. Established a fully automated Playwright end-to-end (E2E) regression test suite verifying live rendering, tab operations, accessibility roving arrow navigation, and theme switches.
0 commit comments