max / goingson

• GO-30-CSP W2+W3: migrate all inline on* handlers to delegated dispatch

  Max Johnson 2026-07-13 21:04 fd23ac5

• Frontend cold spots R4: escapeHandlerArg sweep + gate rule, email preview to Rust

  Max Johnson 2026-07-04 18:52 513c429

• Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)

  Max Johnson 2026-06-22 01:39 278da60

• UX/security: encode attacker-controlled values for HTML attributes, guard URL schemes

  Max Johnson 2026-06-19 20:07 a5b3305

• CSS dedup + UI mode separation + §3 launch-readiness fixes

  Max Johnson 2026-06-01 01:25 94cc2e9

• UX audit sweep: Tier 1-4 + Tier 6 + design-system charter

  Max J. 2026-05-20 23:52 47a0908

• Email features: signatures, drafts, labels, notifications

  Max J. 2026-05-05 22:17 c353834

• Audit Run 14: tests, security hardening, JSDoc, date_utils extraction

  Max J. 2026-04-16 01:38 ba392f7

• v0.3.1: Time tracking, file attachments, external sync, email attachments

  Max J. 2026-04-13 22:18 7c3777d