corex-ui / corex / 59b0eb264c0c36ec7d99dbb3362424e468f9f992

94%

push

github

Fix(chore): security hardening (#55)

* fix(toast): ignore labelHtml and execJs from untrusted DOM events

* fix(mix): contain corex.code output paths within project root

* fix(mix): validate generator flags and migration_dir

* fix(mix): stop EEx re-eval in inject_eex_before_final_end

* fix(installer): harden --dev path and COREX_NEW_CACHE_DIR copy

* fix(installer): validate web_module like root module

* fix(color-picker): reject CSS breakout in inline style values

* fix(components): harden file upload cancel, navigate, and pagination URLs

* chore: re-enable sobelow checks and add hex.audit to release.check

* fix(mcp): redact tool errors by default and warn on remote access

87 of 107 new or added lines in 14 files covered. (81.31%)

7860 of 8433 relevant lines covered (93.21%)

31.9 hits per line