peach-browser / cb6120398385

vault-security: the XSS checks asserted the escaped payload was absent from rendered text, which fails on correct escaping — assert instead that no script element, img or inline handler is ever created, and that GET_ENTRIES answers vault_locked once locked

dev · 5 weeks ago · 2026-07-26 · 5.4 MB

session: playwright setupVault repair · agent: claude-opus-5

parent: bd082b4a23c5