max / goingson

• Security: single-source escaping into js/escape.js, cover the compose window; bump ammonia

  Max Johnson 2026-07-02 21:53 21b5072