feat: sanitize rich clipboard HTML - #65

Merged

seonghobae merged 147 commits into

mainfrom

feat/safe-rich-clipboard

Aug 9, 2026

Commits on Aug 5, 2026

docs: design safe rich clipboard ingestion
seonghobae
committed
b33cde3
docs: plan safe rich clipboard implementation
seonghobae
committed
c33d642
test(clipboard): define safe rich paste contract
seonghobae
committed
c9ab5f8
feat(clipboard): implement bounded rich HTML sanitizer
seonghobae
committed
16272b5
feat(clipboard): add sanitizer to shared editor kit
seonghobae
committed
6e0115b
test(clipboard): cover shared kit configuration
seonghobae
committed
f3f0d67
feat(clipboard): expose editor paste policy props
seonghobae
committed
c71acb0
feat(clipboard): wire standalone paste policy
seonghobae
committed
d06701a
feat(clipboard): wire collaborative paste policy
seonghobae
committed
54736e2
test(clipboard): cover standalone editor integration
seonghobae
committed
7d8d1de
test(clipboard): cover collaborative editor integration
seonghobae
committed
23b486d
test(clipboard): use inferred extension contract
seonghobae
committed
1a6b0eb
feat(clipboard): export safe rich paste API
seonghobae
committed
e52c39a
docs(clipboard): add operator security guide
seonghobae
committed
2faf969
docs(doctoring): record safe rich clipboard boundary
seonghobae
committed
ffb85f2
docs: add Inkspan architecture and trust boundaries
seonghobae
committed
4168586
docs(changelog): record safe rich clipboard slice
seonghobae
committed
34baf71
fix(clipboard): type paste transform input
seonghobae
committed
26cd91f
test(clipboard): preserve untrusted configuration identity
seonghobae
committed
9d30ecb
test(clipboard): use deterministic accessor spy
seonghobae
committed
80a5233
test(clipboard): defer standalone config validation to paste
seonghobae
committed
dc85544
test(clipboard): defer collaborative config validation
seonghobae
committed
cc4b05d
fix(clipboard): validate preserved host config at paste
seonghobae
committed
a1c952e
fix(clipboard): preserve host config until paste validation
seonghobae
committed
2c67c41
test(clipboard): cover hidden-style and transform-order regressions
seonghobae
committed
9f188f2
fix(clipboard): harden Office hiding and final transform order
seonghobae
committed
f948fdd
test(clipboard): assert removed elements through parsed output
seonghobae
committed
c34a5bb
test(clipboard): inspect unwrapped elements structurally
seonghobae
committed
e2998b9
test(docs): require clipboard assurance boundaries
seonghobae
committed
bae6033
docs(clipboard): define paste and browser assurance boundaries
seonghobae
committed
0772cf1
docs(doctoring): record clipboard residual assurance risk
seonghobae
committed
aa23f03
docs(changelog): record clipboard assurance hardening
seonghobae
committed
a387a09
test(ci): require immutable exact-head verification
seonghobae
committed
41c91b3
ci: verify immutable exact pull-request heads
seonghobae
committed
e2fff37
test(docs): require reconciled clipboard design records
seonghobae
committed
7e48536
test: normalize clipboard documentation contracts
seonghobae
committed
94df928
docs(clipboard): reconcile reviewed design and assurance limits
seonghobae
committed
db038d2
docs(clipboard): reconcile implementation plan after review
seonghobae
committed
94ed221
test: cover clipboard fail-closed branches
seonghobae
committed
610318d
test(clipboard): cover absent ambient DOM branch
seonghobae
committed
c3615e5
test(clipboard): cover CSS-escaped hidden declarations
seonghobae
committed
e15104b
test(clipboard): cover CSS escape decoding boundaries
seonghobae
committed
8991804
fix(clipboard): decode bounded CSS escapes for hidden content
seonghobae
committed
5fe4915
test(docs): require CSS escape assurance evidence
seonghobae
committed
8a704b6
docs(clipboard): document bounded CSS escape decoding
seonghobae
committed
0be036e
docs(doctoring): record CSS escape hidden-content defense
seonghobae
committed
b7aa88b
test(docs): bind CSS escape decision to doctoring addendum
seonghobae
committed
cc8797b
docs: record CSS-escaped Office hidden handling
seonghobae
committed
d01dceb
test: close residual clipboard branch coverage
seonghobae
committed
3096782
test(clipboard): cover EOF-terminated CSS comments
seonghobae
committed
dac8fef
fix(clipboard): consume EOF-terminated CSS comments
seonghobae
committed
e6d51c9
docs(clipboard): record EOF CSS comment boundary
seonghobae
committed
e12fec9
docs(clipboard): document EOF comment handling
seonghobae
committed
ae38958
docs(changelog): record EOF CSS comment hardening
seonghobae
committed
fd3b5ae
test(clipboard): reject title metadata subtrees
seonghobae
committed
c116170
fix(clipboard): drop title metadata subtrees
seonghobae
committed
d9fcc0f
test(clipboard): expose closed disclosure text leakage
seonghobae
committed
eebf18a
fix(clipboard): exclude closed interactive content
seonghobae
committed
e84261e
docs(clipboard): define closed interactive content boundary
seonghobae
committed
2e52ec5
docs(doctoring): record closed interactive clipboard boundary
seonghobae
committed
f0b0e49
docs(changelog): record closed interactive sanitizer hardening
seonghobae
committed
111925b
test(docs): bind closed interactive clipboard policy
seonghobae
committed
ba97291
test: reject native-widget fallback text
seonghobae
committed
6e6d48f
fix: drop native-widget fallback subtrees
seonghobae
committed
01683cc
docs: record fallback-content boundary
seonghobae
committed
2269d36
docs: explain fallback-content sanitization
seonghobae
committed
6ab2272
docs: record fallback-content change
seonghobae
committed
aa7a556
test: bind fallback-content documentation
seonghobae
committed
75e96eb
test(clipboard): expose hidden datalist fallback text
seonghobae
committed
a48d81e
fix(clipboard): drop hidden datalist suggestion content
seonghobae
committed
ec5d602
docs(clipboard): record hidden datalist boundary
seonghobae
committed
5a17ec2
docs(clipboard): document hidden datalist suggestions
seonghobae
committed
80e073c
test(docs): require datalist visibility evidence
seonghobae
committed
491e97e
docs(changelog): record datalist visibility boundary
seonghobae
committed
83429c3
docs(clipboard): correct interactive record date metadata
seonghobae
committed
8335871
docs(clipboard): correct native fallback decision date
seonghobae
committed
d356f08
docs(clipboard): synchronize hidden boundaries and memory claims
seonghobae
committed
602bcd2
docs(clipboard): correct review defect count
seonghobae
committed
f8c24f6
test(clipboard): prove representative Word capacity
seonghobae
committed
46e744e
docs(types): clarify clipboard policy lifecycle
seonghobae
committed
04657df
test(clipboard): require one safe-link policy decision
seonghobae
committed
6dadce2
refactor(clipboard): reuse safe-link classification
seonghobae
committed
00d163e

Commits on Aug 6, 2026

test(clipboard): reject visibility-collapse content
seonghobae
committed
77ea951
fix(clipboard): drop visibility-collapse subtrees
seonghobae
committed
503ba7f
docs(clipboard): record visibility-collapse boundary
seonghobae
committed
7a7efd1
test(docs): bind visibility-collapse decision
seonghobae
committed
95dc3eb
test(clipboard): expose content-visibility hidden gap
seonghobae
committed
3e369cb
fix(clipboard): drop content-visibility hidden subtrees
seonghobae
committed
28df0b9
test(docs): bind content-visibility hidden policy
seonghobae
committed
b830f49
docs(clipboard): define content-visibility hidden boundary
seonghobae
committed
f5af554
docs(doctoring): record content-visibility hidden decision
seonghobae
committed
b82405f
docs(architecture): preserve integrated modular contract
seonghobae
committed
20238fb
docs(changelog): reconcile architecture and clipboard evidence
seonghobae
committed
baeaa89
test(ci): preserve exact-head evidence contract
seonghobae
committed
ca7b417
docs(ci): preserve exact-head evidence record
seonghobae
committed
54d8a68
docs(changelog): isolate pending clipboard notes from integrated history
seonghobae
committed
2d47306
Merge 2d47306043581a18db7e6ba0847e8368a0e34982 into ca49a3249403be88ba3cb7c9589b3652f820e17c
seonghobae
authored
50dcde8
test(clipboard): expose hidden popover content
seonghobae
committed
d69575e
fix(clipboard): drop hidden popover subtrees
seonghobae
committed
ee14bdb
test(clipboard): cover invalid popover default
seonghobae
committed
0af1410
docs(clipboard): record popover hidden-content policy
seonghobae
committed
36e0e5a
docs(clipboard): explain popover privacy boundary
seonghobae
committed
2d38ccb
docs(changelog): record popover hidden-content fix
seonghobae
committed
639eaf0
test(docs): bind popover policy evidence
seonghobae
committed
7f0fa36
test(security): expose DOM capability reflection leakage
seonghobae
committed
486846a
fix(security): redact DOM capability reflection failures
seonghobae
committed
e438765
docs(security): record DOM reflection redaction decision
seonghobae
committed
73585e5
docs(changelog): record DOM capability reflection repair
seonghobae
committed
1e27f14
docs(security): document DOM capability failure boundary
seonghobae
committed
5c84b73
test(docs): bind DOM reflection security evidence
seonghobae
committed
0c63934

Commits on Aug 7, 2026

test(clipboard): exercise actual ProseMirror paste pipeline
seonghobae
committed
2e1d634
fix(clipboard): install sanitizer in ProseMirror paste pipeline
seonghobae
committed
88bdd07
fix(clipboard): use registered TipTap v2 adapter
seonghobae
committed
ce95e56
fix(clipboard): export registered SafeClipboard adapter
seonghobae
committed
018b55e
test(clipboard): verify collaborative ProseMirror paste path
seonghobae
committed
8070ed0
test(clipboard): cover TipTap v2 adapter and transform order
seonghobae
committed
9ed36e6
test(clipboard): bind plugin transform context
seonghobae
committed
9ba9c60
test(clipboard): use real ProseMirror transform ordering
seonghobae
committed
88d5ebd
test(clipboard): cover preserved nested config branch
seonghobae
committed
dc4c8d7
test(docs): require TipTap v2 paste adapter doctoring
seonghobae
committed
a646a99
docs(clipboard): record TipTap v2 paste adapter root cause
seonghobae
committed
ea74226
test(api): prove registered SafeClipboard exports
seonghobae
committed
f43848e
docs(changelog): record TipTap v2 paste adapter repair
seonghobae
committed
257c494
test(docs): bind clipboard adapter changelog evidence
seonghobae
committed
f0416d0

Commits on Aug 9, 2026