-
Link the time axis: makeover-build 0.52.0 writes static/timing.css
-
Answer the version download with a redirect, not JSON describing one
-
server: the three profile links navigate, rather than swapping a document into a cell
-
custom-pages: make the HTML oracle observable
-
custom-pages: clippy nit in the regression replay
-
custom-pages: replay regressions on a thread with room to recurse
-
custom-pages: run the css oracle on a thread with room to recurse
-
custom-pages: stop asserting CSS selector scoping over adversarial bytes
-
custom-pages: assert CSS scoping only where the parse tree is faithful
-
custom-pages: a libFuzzer target for the CSS sanitizer, and a DoS fix
-
custom-pages: a libFuzzer target for the HTML sanitizer
-
Take quasi 0.63, where Sought gained a save shape
-
Take quasi 0.62, where Curve is re-exported
-
Fix the flaky csp_report default-filter test
-
Refuse the reveal and repeat scripts on an embed
-
Describe the discover search box, and delete the JS that drew it
-
Move the server's quasi pins to 0.61
-
sando: pin referenced artifacts in the node release gc too
-
Take quasi 0.60: a question answered N times
-
sando: never gc an artifact a tier still references
-
Extract MNW/shared/custom-pages, so the sanitizers are fuzzable alone
-
Move the quasi pins to 0.59
-
Dispatch webhooks on an MNW event enum, not on Stripe event-name strings
-
Move the server's quasi pins to 0.58
-
Publish the Alloy hotfix RPM repo through a server-minted presigned PUT
-
Move the quasi pins to 0.57, for Outcome::Locate
-
Guard companion binaries before the swap, not by their unit failing to start
-
Say which recipes may call glibc_check, and which structurally cannot
-
Refuse a bundle above the node's declared glibc, before the rsync
-
Declare what each host is, and check it before building or shipping there