fix(core): contain generated HTML CSS and script contexts - #3800

Merged

jrusso1020 merged 8 commits into

mainfrom

fix/security-generator-attributes

Sep 9, 2026

Commits on Sep 9, 2026

fix(core): escape generator metadata attributes
jrusso1020
committed
3425364
fix(parsers): retain decoded metadata while assigning ids
jrusso1020
committed
331fd03
fix(parsers): preserve runtime html parser semantics
jrusso1020
committed
9eb94be
fix(parsers): canonicalize HTML attribute names for stable IDs
jrusso1020
committed
dd9d68f
fix(parsers): normalize SVG attribute hashes across HTML parsers
jrusso1020
committed
9a34b5b
fix(core): escape public resolution attribute values
jrusso1020
committed
6b7e59d
fix(core): contain generated HTML CSS and script contexts
jrusso1020
committed
3bb18ca
fix(core): preserve empty captions and document authored code trust
jrusso1020
committed
3ccbcf8