Releases: whiteowl-engine/WhiteOwl-Extension
Releases · whiteowl-engine/WhiteOwl-Extension
WhiteOwl Extension v1.1.2
Bug Fixes
- Security: Replace innerHTML with extContent for system messages to prevent XSS from WebSocket data
- Security: Sanitize base64 image data in chat_image handler to prevent attribute injection
- Security: Use esc() for caption escaping instead of partial <-only escape
- Security: Validate checkpoint IDs as integers before use in DOM queries and innerHTML
- Cleanup: Remove unused variable from syncAxiomCookies() in background service worker
Full Changelog: v1.1.1...v1.1.2