copilot-swe-agent[bot] fb5f22a6b2 fix(website): properly escape backslashes and quotes in file paths ...

The previous implementation only escaped single quotes, which could allow
backslashes in file paths to break out of the JavaScript string context.
Now we escape backslashes first (\ -> \\), then single quotes (' -> \'),
preventing potential security issues.

Fixes CodeQL alert #26 for incomplete string escaping.

Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com>

2026-02-02 05:05:42 +00:00

..

data

Add tools catalog with YAML schema and website page

2026-01-29 13:48:42 +11:00

public

these are generated, shouldn't be committed

2026-02-02 15:36:32 +11:00

src

fix(website): properly escape backslashes and quotes in file paths

2026-02-02 05:05:42 +00:00

astro.config.mjs

Enable source maps for JavaScript and CSS

2026-02-02 10:31:19 +11:00

package-lock.json

chore: rename website-astro to website, update gitignore

2026-01-28 16:42:32 +11:00

package.json

chore: rename website-astro to website, update gitignore

2026-01-28 16:42:32 +11:00