kevinveenbirkenbachandClaude Opus 5.5 6e045bced8 fix(web-app-docs): encode line breaks in redirects, navigate by built URLs ...

- py/http-response-splitting (server.py:87): _redirect percent-encodes CR
  and LF in the Location header
- js/xss-through-dom (versions.js:82, languages.js:25): both switchers
  navigate to the URL they built instead of select.value

The new cases in test_server.py, versions.test.js and languages.test.js
fail without the fix and pass with it.

🎯 Fix: 92 %
💥 Break: 3 %
💸 Cost: –
⏱️ Time: –
🛡️ Security: 100 %
🏆 Score: 89
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-05 16:54:27 +00:00

..

cli

…

compose

…

group_vars

…

library

Merge two operator-approved sidetrees into feature/store-i18n

2026-11-05 15:37:37 +00:00

plugins

fix(sys-dns-cloudflare-records): root the API constant at /zones

2026-11-05 16:18:01 +00:00

roles

fix(web-app-docs): encode line breaks in redirects, navigate by built URLs

2026-11-05 16:54:27 +00:00

scripts

…

tests

…

utils

…

__init__.py

…