a.tolmachev
43 lines
1.2 KiB
Markdown
43 lines
1.2 KiB
Markdown
# TASKS
|
|
|
|
## Current
|
|
|
|
### `feat/frontend-xss-hardening`
|
|
|
|
Status: in_progress
|
|
|
|
DoD:
|
|
- API-provided values are not rendered into `innerHTML` on user-facing admin pages
|
|
- error strings from API responses are rendered through text nodes
|
|
- streaming admin pages use DOM construction instead of HTML string concatenation for dynamic cards
|
|
|
|
## Next
|
|
|
|
- `feat/distributed-mcp-session-store`
|
|
|
|
## Backlog
|
|
|
|
- `feat/frontend-xss-hardening`
|
|
- `feat/frontend-login-simplification`
|
|
- `feat/frontend-settings-honesty-pass`
|
|
- `feat/frontend-command-palette-decision`
|
|
- `feat/frontend-plural-rules`
|
|
- `feat/frontend-template-safety-cleanup`
|
|
- `feat/frontend-shell-unification`
|
|
- `feat/frontend-wizard-modularization`
|
|
- `feat/frontend-css-state-cleanup`
|
|
- `feat/frontend-performance-polish`
|
|
- `feat/frontend-observability-and-testability`
|
|
- `feat/id-display-support`
|
|
- `feat/postgres-pool-config`
|
|
- `feat/postgres-registry-modularization`
|
|
- `feat/sqlx-compile-time-verification`
|
|
- `feat/secret-crypto-hkdf`
|
|
- `feat/typed-timestamps`
|
|
- `feat/error-structure-normalization`
|
|
- `feat/correlation-id-propagation`
|
|
- `feat/runtime-rate-limiting-and-backpressure`
|
|
- `feat/distributed-mcp-session-store`
|
|
- `feat/websocket-test-run-polish`
|
|
- `feat/live-authenticated-staging-entry`
|