mirror of
https://github.com/praktimarc/kst4contest.git
synced 2026-10-26 16:15:51 +01:00
Strip HTML tags and XML comments until the text no longer changes, so that nested input cannot reassemble a tag or comment after a single pass (js/incomplete-multi-character-sanitization in website/.eleventy.js and website/scripts/validate-version-info.js). Limit the GITHUB_TOKEN of the PR compile check and the test version-XML workflow to read access (actions/missing-workflow-permissions). Claude-Session: https://claude.ai/code/session_01FJBfPYm6rCH4zD6T7bcC7Y