Tobias Gesellchen e6cd031ea4 fix(player): render literal x instead of HTML entity for dismiss button ...

htm/Preact template literals insert text as a DOM text node rather than
parsing it as HTML, so the × entity was never decoded and showed
up literally in the player UI's announcement banner. The admin UI's
equivalent button is unaffected because it's built as an HTML string
inserted via innerHTML, where the browser does decode entities.

Fixes the player-UI regression noted in #591.

2026-08-10 22:31:44 +02:00

..

amazon

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

bmx

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

certmanager

sec4: fix unhandled writable file close; ignore CODE-SCANNING-NOTES.md

2026-05-24 15:52:35 +02:00

constants

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

datastore

feat(announcements): support a proper link, not a raw URL in the message text

2026-08-09 10:18:19 +02:00

ding

fix(health): skip fetchHealth re-render for non-resolving quick fixes

2026-05-27 21:20:58 +02:00

export

feat(export): encrypted diagnostic report for issue reporting

2026-05-21 20:02:57 +02:00

handlers

fix(service): trim whitespace from TuneIn path/query params

2026-08-09 19:47:49 +02:00

health

feat(health): add admin_area_auth_available check

2026-08-08 23:49:57 +02:00

logbuf

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

marge

test(marge): guard source XML shape; feat(library): merge speaker-side media server discovery

2026-08-10 22:27:13 +02:00

proxy

sec8: move lgtm annotation above log.Printf to suppress CodeQL alert #294

2026-05-25 20:06:36 +02:00

setup

docs+fix(telnet): label getpdo output as runtime-layer-only, not proof of persistence

2026-08-09 20:46:51 +02:00

soundtouchweb

fix(player): render literal x instead of HTML entity for dismiss button

2026-08-10 22:31:44 +02:00

spotify

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

stations

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

stockholm

fix(lint): sec6/sec7 post-pass — static.go Close + remove unused sanitizeErr

2026-05-25 11:28:26 +02:00

testing/fakespeaker

fixup: refine CodeQL XSS autofix (fakespeaker round-trip + lint)

2026-06-14 21:36:01 +02:00

tts

fix(tts): play via LOCAL_INTERNET_RADIO; accept app_key at /v1/auth

2026-05-31 22:35:31 +02:00

updatecheck

feat(announcements): support a proper link, not a raw URL in the message text

2026-08-09 10:18:19 +02:00

zeroconf

sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136)

2026-05-25 21:17:57 +02:00