Repository navigation

Gate the raw HTML that reaches the page - #194

Merged

DZPM merged 17 commits into

editionfrom

pr/3-third-party

Oct 5, 2026

Merged

Gate the raw HTML that reaches the page#194
DZPM merged 17 commits into
editionfrom
pr/3-third-party

Commits on Oct 4, 2026
- Render agenda levels and legend from data, not raw HTML
  DZPM
  committed
  9b53e9f
- Add CODEOWNERS for the high damage paths
  DZPM
  committed
  394cc22
- Add bin/check-html-safety and run it on pull requests
  DZPM
  committed
  97c2755
- Convert raw HTML in content to shortcodes
  DZPM
  committed
  ea5a61e
- ci: run the HTML safety check in the pull request workflow
  DZPM
  committed
  45872e2
- fix(ci): close the holes in the HTML safety check
  DZPM
  committed
  1af2db8
- fix(theme): stop assembling HTML attributes with printf
  DZPM
  committed
  2d4c4ae
- fix(ci): scan every content format and fail on unknown extensions
  DZPM
  committed
  31855dd
- fix(ci): match an allowlist entry against the attribute the element loads
  DZPM
  committed
  f40f2ef
- fix(ci): block the srcdoc attribute
  DZPM
  committed
  c152f89
- fix(ci): check the style attribute and the vbscript: and data: schemes
  DZPM
  committed
  774cc8c
- fix(content): embed the PyDay 2019 calendar through the google-embed shortcode
  DZPM
  committed
  079f0a5
- docs: describe the HTML safety check as it is
  DZPM
  committed
  9bd369f
- docs: update the check-html-safety docstring for the new scope
  DZPM
  committed
  13b62d0
- fix(ci): report the real line of a scheme finding
  DZPM
  committed
  035571a
- fix(ci): cap an accepted style length at four digits
  DZPM
  committed
  fd3a196
- fix(ci): own the sponsor and event paths, and name a team that works
  DZPM
  committed
  c2eb301

Commits

Commits on Oct 4, 2026