GuavaPopper c1c1fae93c fix: escape user-controlled fields in admin/users innerHTML to prevent stored XSS ...

u.name and u.email are stored user input and were interpolated raw into
tbody.innerHTML. Added esc() helper and applied to name, email, and role
display string.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-03 13:53:01 +07:00

..

admin

fix: escape user-controlled fields in admin/users innerHTML to prevent stored XSS

2026-06-03 13:53:01 +07:00

auth

feat: add custom login view with map background

2026-06-02 19:28:26 +07:00

data.blade.php

feat: Plan 3 — Manajemen Pengguna (Admin User Management)

2026-06-03 13:51:08 +07:00

map.blade.php

feat: Plan 3 — Manajemen Pengguna (Admin User Management)

2026-06-03 13:51:08 +07:00

welcome.blade.php

feat: add auth navbar and role-aware UI to all views

2026-06-02 19:34:17 +07:00