diff --git a/TASKS.md b/TASKS.md index d973a7c..d5f3809 100644 --- a/TASKS.md +++ b/TASKS.md @@ -2,19 +2,20 @@ ## Current -### `feat/frontend-command-palette-decision` +### `feat/frontend-xss-hardening` Status: in_progress DoD: -- the `⌘K` affordance in the shell either works end-to-end or is removed everywhere -- no dead command-palette trigger remains in desktop navigation -- EN and RU copy stay aligned for the chosen outcome -- the chosen outcome is verified in the UI smoke path +- API-derived data is not inserted into `innerHTML` without escaping +- shared DOM-safe helpers are introduced for frontend rendering paths that still need markup +- known unsafe rendering paths from `__REVIEW_FRONT.md` are removed or hardened +- the current UI behavior remains intact after the hardening pass +- targeted frontend smoke checks cover the touched pages ## Next -- `feat/frontend-xss-hardening` +- `feat/frontend-shell-unification` ## Backlog diff --git a/apps/ui/css/layout.css b/apps/ui/css/layout.css index 2092915..b1b2870 100644 --- a/apps/ui/css/layout.css +++ b/apps/ui/css/layout.css @@ -65,18 +65,6 @@ gap: 10px; margin-left: auto; } -.nav-kbd { - display: flex; - align-items: center; - gap: 4px; - border: 1px solid var(--border); - border-radius: var(--radius); - padding: 4px 9px; - font-size: 12px; - color: var(--text-muted); - background: var(--bg-overlay); - cursor: pointer; -} .nav-icon-btn { width: 32px; height: 32px; @@ -223,7 +211,6 @@ @media (max-width: 720px) { .navbar { padding: 0 16px; } .nav-links { display: none; } - .nav-kbd { display: none; } .nav-hamburger { display: flex; } .mobile-nav { display: block; } diff --git a/apps/ui/html/agents.html b/apps/ui/html/agents.html index 1cefcc1..ac052c0 100644 --- a/apps/ui/html/agents.html +++ b/apps/ui/html/agents.html @@ -58,10 +58,6 @@