Strip HTML tags and XML comments until the text no longer changes, so that
nested input cannot reassemble a tag or comment after a single pass
(js/incomplete-multi-character-sanitization in website/.eleventy.js and
website/scripts/validate-version-info.js).
Limit the GITHUB_TOKEN of the PR compile check and the test version-XML
workflow to read access (actions/missing-workflow-permissions).
Claude-Session: https://claude.ai/code/session_01FJBfPYm6rCH4zD6T7bcC7Y
Rsclub2_2
Marc Froehlich