Skip to content

Releases: whiteowl-engine/WhiteOwl-Extension

WhiteOwl Extension v1.1.2

30 Apr 12:44

Choose a tag to compare

Bug Fixes

  • Security: Replace innerHTML with extContent for system messages to prevent XSS from WebSocket data
  • Security: Sanitize base64 image data in chat_image handler to prevent attribute injection
  • Security: Use esc() for caption escaping instead of partial <-only escape
  • Security: Validate checkpoint IDs as integers before use in DOM queries and innerHTML
  • Cleanup: Remove unused variable from syncAxiomCookies() in background service worker

Full Changelog: v1.1.1...v1.1.2

WhiteOwl Extension v1.1.1

19 Apr 15:01

Choose a tag to compare