max / goingson

• GO-30-CSP W2+W3: migrate all inline on* handlers to delegated dispatch

  Max Johnson 2026-07-13 21:04 fd23ac5

• Remove Rhai plugin runtime; native CSV import (Security axis)

  Max Johnson 2026-06-22 02:05 f755200

• Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)

  Max Johnson 2026-06-22 01:39 278da60

• UX/security: encode attacker-controlled values for HTML attributes, guard URL schemes

  Max Johnson 2026-06-19 20:07 a5b3305

• CSS dedup + UI mode separation + §3 launch-readiness fixes

  Max Johnson 2026-06-01 01:25 94cc2e9

• Audit Run 14: tests, security hardening, JSDoc, date_utils extraction

  Max J. 2026-04-16 01:38 ba392f7

• Mobile UX improvements, monthly review, maintainability splits

  Max J. 2026-04-07 21:10 7fd3221

• Initial commit

  Max J. 2026-03-05 18:51 91ffe75