Claude 22d3d8c1ff Address Codacy static-analysis findings in settings JS ...

Refactor the two new modules to clear the flagged patterns without any
behavior change:

- Build the search dropdown with DOM nodes + textContent instead of
  innerHTML string concatenation, removing the XSS sinks and the manual
  escapeHtml helper it needed.
- Replace numeric index access (index[i], terms[j], opts[idx],
  currentResults[i]) with array iteration methods, NodeList.item(), and
  Array.prototype.at() to clear detect-object-injection.
- Use === via a shared termsMatch() helper, optional-catch binding, and
  drop a useless initial assignment.

Verified with ESLint (eslint:recommended + eslint-plugin-security) at zero
findings and re-ran the headless-Chromium behavior test (tooltip, per-tab
filter, global search navigation) — all green.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014gZxznuxw8L92FUMBN3Nqz

2026-07-08 15:13:26 +00:00

..

config

Plugins (#145)

2025-12-27 14:15:49 -05:00

plugins

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

utils

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

widgets

fix: array-table boolean columns always saved as unchecked (#381)

2026-07-06 08:05:06 -04:00

alpinejs.min.js

Plugins (#145)

2025-12-27 14:15:49 -05:00

htmx-json-enc.js

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

htmx-sse.js

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

htmx.min.js

Plugins (#145)

2025-12-27 14:15:49 -05:00

settings-search.js

Address Codacy static-analysis findings in settings JS

2026-07-08 15:13:26 +00:00

tooltips.js

Address Codacy static-analysis findings in settings JS

2026-07-08 15:13:26 +00:00