New translations admin.pot (Arabic)
История коммитов
New translations admin.pot (French)
New translations admin.pot (Romanian)
fix(profile): harden activity feed output against XSS
Escape URLs and names in activity templates for forum messages/topics.
Use forum text preparation pipeline (purify/embed/smilies) before strip/trim for safe previews without encoded artifacts.
Use forum text preparation pipeline (purify/embed/smilies) before strip/trim for safe previews without encoded artifacts.
refactor(forum): keep topic names raw and format paged meta
Stop HTML-encoding topic title on input and remove decode-based handling in forum flow.
Build topic title and description with page suffix for paginated topic pages.
Build topic title and description with page suffix for paginated topic pages.
docs(agents): add output escaping and input handling rules
Document security guideline: accept raw input, validate on input, escape on output by context.
Add notes for URL scheme allowlist, JSON encoding, rich content sanitization, and avoiding double-escaping.
Add notes for URL scheme allowlist, JSON encoding, rich content sanitization, and avoiding double-escaping.
feat(theme): append site copyright to page titles
Add global title suffix '| copyright' in default layout for all pages except home.
Keep forum topic controller responsible for page numbering in title on paginated topic pages.
Keep forum topic controller responsible for page numbering in title on paginated topic pages.
fix(forum): escape topic and section names in forum UI
Add breadcrumb path for show-post and escape breadcrumb values in default/admin themes.
Escape section/topic names across forum and admin forum templates to prevent XSS.
Harden forum search title rendering by escaping names before highlighting.
Escape section/topic names across forum and admin forum templates to prevent XSS.
Harden forum search title rendering by escaping names before highlighting.
fix(forum): hide reply and quote in closed topics for regular users
chore: update changelog
© 2026, JohnCMS