max / goingson

• Frontend cold spots R4: escapeHandlerArg sweep + gate rule, email preview to Rust

  Max Johnson 2026-07-04 18:52 513c429

• Security: single-source escaping into js/escape.js, cover the compose window; bump ammonia

  Max Johnson 2026-07-02 21:53 21b5072

• Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)

  Max Johnson 2026-06-22 01:39 278da60

• Add "What's New" after-update dialog and standardize empty states

  Max Johnson 2026-06-07 18:51 f7854e7

• Audit remediation: observability, adversarial fixes, JS tests, doc comments

  Max J. 2026-03-14 03:35 7efdd78