mirror of
https://github.com/anthropics/knowledge-work-plugins.git
synced 2026-09-14 20:16:30 +08:00
Jake Marsh
fc446d6c6a
Task titles, notes, subtask text, and section names from the opened task file, plus memory file and directory names, were interpolated into innerHTML template strings unescaped, so markup in that content was parsed as HTML when the dashboard rendered. - Route every such interpolation through the existing escapeHtml() helper. - Make escapeHtml() also escape quotes so it is safe inside attribute values (data-tab, data-search, placeholder). - Replace the inline onclick/oninput handlers that embedded file and directory names in JavaScript string literals with addEventListener, matching the pattern the rest of the file already uses. - Bump plugin version to 1.3.1.
9 lines
286 B
JSON
9 lines
286 B
JSON
{
|
|
"name": "productivity",
|
|
"version": "1.3.1",
|
|
"description": "Manage tasks, plan your day, and build up memory of important context about your work. Syncs with your calendar, email, and chat to keep everything organized and on track.",
|
|
"author": {
|
|
"name": "Anthropic"
|
|
}
|
|
}
|