fix: escape YAML data in threat model detail overlay to prevent XSS - #140

Merged

steipete merged 3 commits into

openclaw:mainfrom

SebTardif:fix-threatmodel-xss

May 15, 2026

Commits on May 15, 2026

fix: escape YAML data in threat model detail overlay to prevent XSS
SebTardif
committed
4878f9b
fix: use DOM API for badges to prevent href attribute XSS
SebTardif
committed
5638ca0
fix: harden threat model overlay rendering
steipete
committed
ea636d1