max / goingson

• GO-30-CSP W2+W3: migrate all inline on* handlers to delegated dispatch

  Max Johnson 2026-07-13 21:04 fd23ac5

• Harden email-body linkifier against href attribute breakout

  Max Johnson 2026-07-07 14:08 6e9e6ca

• Security: single-source escaping into js/escape.js, cover the compose window; bump ammonia

  Max Johnson 2026-07-02 21:53 21b5072

• Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)

  Max Johnson 2026-06-22 01:39 278da60

• UX/security: encode attacker-controlled values for HTML attributes, guard URL schemes

  Max Johnson 2026-06-19 20:07 a5b3305

• email reader: detect any HTML tag for reader-mode strip, not a tag denylist

  Max Johnson 2026-06-19 19:54 15b1025

• Security remediation: fix stored XSS in email labels, harden the URL opener

  Max Johnson 2026-06-19 19:48 dcf3f5f

• fix(ux): centralize natural-date parsing in Rust, fix cache-invalidate order, clamp pagination

  Max Johnson 2026-06-16 02:23 7025358

• theme: GoingsOn styles purely intent-specified (no brand aliases)

  Max Johnson 2026-06-13 01:51 582f7a2

• UX audit remediation, error handling, day planning, draft autosave

  Max J. 2026-05-07 21:17 ce3f06d

• Email features: signatures, drafts, labels, notifications

  Max J. 2026-05-05 22:17 c353834

• UX audit: 11 usability improvements from audit findings

  Max J. 2026-05-04 02:58 0215064

• Audit Run 14: tests, security hardening, JSDoc, date_utils extraction

  Max J. 2026-04-16 01:38 ba392f7

• Theme import/export, weekly review improvements, mobile UX cleanup

  Max J. 2026-04-08 20:12 2aa7cd2

• Mobile UX improvements, monthly review, maintainability splits

  Max J. 2026-04-07 21:10 7fd3221

• Initial commit

  Max J. 2026-03-05 18:51 91ffe75