thejayman77 ba92c0a04b Reply sanitizer: cap raw input, auto-close open tags (no severed HTML) ...

Per Codex: slicing the SANITIZED html with [:8000] could cut through a tag or
entity. Cap the RAW editor HTML (20k) before sanitizing instead, and have
sanitize_reply_html auto-close any still-open allowed tags so malformed input
can never leave a dangling/severed tag in message_html or the email body.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-09 09:22:41 -04:00

..

conftest.py

Hardening pass: scheduler backoff, FK cascade, a11y, test safety net

2026-06-06 19:18:18 +00:00

test_account_api.py

Accounts Phase 4: prefs sync + account/settings panel

2026-06-03 14:02:38 +00:00

test_admin.py

Admin: analytics date-range toggle (7d / 30d / 90d)

2026-06-08 14:14:47 -04:00

test_api.py

Phase B1: multi-tag groupings model (backend)

2026-06-01 18:35:25 +00:00

test_auth_api.py

Accounts Phase 1b: magic-link auth endpoints + sessions

2026-06-03 01:08:33 +00:00

test_auth.py

Fix: capture Google avatar on returning sign-in (+ userinfo fallback)

2026-06-03 14:57:44 +00:00

test_brief_idempotent.py

Fresh server data overrides a pinned brief; pin holds otherwise

2026-05-31 14:00:08 +00:00

test_brief_paywall.py

Make paywalls systemic + fix ArticleCard reactivity

2026-05-31 01:36:53 +00:00

test_brief_refill.py

Persist replacements across refresh (device-local, no account)

2026-05-31 13:22:41 +00:00

test_briefs_fk.py

Hardening pass: scheduler backoff, FK cascade, a11y, test safety net

2026-06-06 19:18:18 +00:00

test_briefs.py

Brief emotional-mix guardrails + source on its own line

2026-05-31 12:29:02 +00:00

test_candidates.py

Supervised source candidates: stage, list, promote, reject

2026-05-30 19:52:40 +00:00

test_dashboard.py

Sources: accepted-duplicate % (curation-quality signal)

2026-06-08 15:47:51 -04:00

test_dedup.py

Durability pass: tests, clearer diversity/classify behavior, Calm Filters foundation

2026-05-30 19:07:31 +00:00

test_enrich_images.py

Durable image quality: stop trusting feed thumbnails; cycle enriches Latest

2026-06-07 15:55:57 -04:00

test_enrich.py

Use BBC's clean image variant (cpsprodpb) instead of the branded one

2026-06-02 07:51:51 +00:00

test_events.py

Admin step A: privacy-respecting first-party event logging

2026-06-03 18:21:49 +00:00

test_feed_images.py

Typographic-first imagery + opportunistic feed-HTML image extraction

2026-05-30 23:59:36 +00:00

test_feed_sort.py

Source feeds: click a source to see its publication feed

2026-06-08 08:30:33 -04:00

test_feedback.py

Feedback reply: admin-only WYSIWYG editor (server stays the adult)

2026-06-09 09:10:57 -04:00

test_filters.py

Calm Filters MVP: device-local personalization across feed/brief/counts

2026-05-30 19:16:42 +00:00

test_hero.py

Hero emotional-safety guardrail + calmer card polish

2026-05-30 22:44:00 +00:00

test_lanes.py

Add a permanent "Latest" lane beside "Highlights"

2026-06-06 15:56:48 -04:00

test_markup.py

Reply sanitizer: cap raw input, auto-close open tags (no severed HTML)

2026-06-09 09:22:41 -04:00

test_oauth.py

User avatar (Google picture), avatar in mobile You tab, /account page

2026-06-03 14:41:43 +00:00

test_paywall.py

Paywall awareness (#6) + replace-an-article (#7)

2026-05-31 00:39:13 +00:00

test_preview.py

Track 3: read-only source preview (vet a feed before adding)

2026-05-30 19:37:34 +00:00

test_queries.py

Build the SvelteKit frontend: calm home with mood modes

2026-05-30 22:27:46 +00:00

test_replacement.py

Paywall awareness (#6) + replace-an-article (#7)

2026-05-31 00:39:13 +00:00

test_review_paywall.py

Make paywalls systemic + fix ArticleCard reactivity

2026-05-31 01:36:53 +00:00

test_review.py

Advisory source health: review flags, never auto-deactivate

2026-05-30 20:28:35 +00:00

test_saved_api.py

Fix: "Clear my history" now clears account history too

2026-06-04 01:09:43 +00:00

test_scheduler.py

Hardening pass: scheduler backoff, FK cascade, a11y, test safety net

2026-06-06 19:18:18 +00:00

test_scoring.py

Durability pass: tests, clearer diversity/classify behavior, Calm Filters foundation

2026-05-30 19:07:31 +00:00

test_seo.py

SEO flywheel: /today digest, sitemap, robots, home OG tags

2026-06-05 19:37:05 +00:00

test_share.py

Article sharing: branded /a/<id> page + share menu

2026-06-03 15:27:30 +00:00

test_summary.py

Share pages: lazy, cached, our-own-words article summaries

2026-06-03 18:08:40 +00:00

test_tags.py

Phase B1: multi-tag groupings model (backend)

2026-06-01 18:35:25 +00:00

test_text.py

Durability pass: tests, clearer diversity/classify behavior, Calm Filters foundation

2026-05-30 19:07:31 +00:00