Files
graphify/graphify
dsremo a52350940a fix(tree): escape title, header, and JSON blob in emit_html
html.escape() the values that land in <title> and <h1>, and replace </
with <\/ in the JSON embedded inside <script> so crafted graph labels
or --label values cannot break out. Mirrors the _js_safe() pattern in
export.py.

Reported by Qodo on PR #557.
2026-04-27 11:55:21 +05:30
..
2026-04-21 22:26:17 +01:00