max / goingson

• GO-30-CSP W2+W3: migrate all inline on* handlers to delegated dispatch

  Max Johnson 2026-07-13 21:04 fd23ac5

• Audit Run 34 cold spots: JMAP tracing, connection-string, calendar bug, cred cleanup

  Max Johnson 2026-07-06 14:57 1528b9e

• Frontend cold spots R4: escapeHandlerArg sweep + gate rule, email preview to Rust

  Max Johnson 2026-07-04 18:52 513c429

• Frontend cold spots R1: isAllDay flag, time-summary rollup to Rust, extract injected CSS

  Max Johnson 2026-07-04 18:19 c173daa

• Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)

  Max Johnson 2026-06-22 01:39 278da60

• UX/security: encode attacker-controlled values for HTML attributes, guard URL schemes

  Max Johnson 2026-06-19 20:07 a5b3305

• CSS dedup + UI mode separation + §3 launch-readiness fixes

  Max Johnson 2026-06-01 01:25 94cc2e9

• UX audit sweep: Tier 1-4 + Tier 6 + design-system charter

  Max J. 2026-05-20 23:52 47a0908

• Mobile UX rework: touch-native interactions, segmented events, iOS fixes

  Max J. 2026-05-18 22:25 b79f301

• Daily notes, implicit contacts, UX polish, calendar views, search

  Max J. 2026-05-07 03:25 73d3f4a