Mohamed Boudra fc3b2c4eb7 Sanitize plugin overview rendering: no raw HTML, https links only, no relative links (#6244) ...

* fix(plugins): restrict overview content to safe Markdown and HTTPS destinations

Registry overviews are author-controlled content read away from their repositories. Apply a shared presentation policy instead of the documentation renderer so relative links, non-HTTPS URLs, raw HTML, and author styles never become active overview content.

* fix(plugins): choose the first allowed screenshot for previews

2026-10-06 18:31:53 +01:00

..

qa-evidence/sidebar-empty-state-card

feat(sidebar): make empty project actions clear and quiet (#5675)

2026-09-29 12:02:38 +01:00

refactors

Remove chat rooms and agent loops before storage migration (#3053)

2026-08-10 21:06:47 +02:00

ad-hoc-daemon-testing.md

fix(subscriptions): isolate observers and silence unrequested feeds (#4596)

2026-09-11 08:07:35 +02:00

agent-lifecycle.md

feat(omp): make OMP a first-class provider (#5550)

2026-09-29 14:12:53 +01:00

agent-stream-performance.md

Find text in assistant messages that streamed in the open chat (#5146)

2026-09-21 22:31:08 +02:00

android.md

fix(app): restore character-paced streaming replies (#5013)

2026-09-17 18:32:12 +02:00

architecture.md

perf(desktop): reduce daemon management memory overhead (#5007)

2026-09-17 15:18:12 +02:00

browser-capture-harness.md

fix(desktop): restore titlebar dragging after scrolling chat (#5233)

2026-10-05 23:09:19 +01:00

coding-standards.md

Keep open chats current and show reconnection progress (#4863)

2026-09-15 04:30:25 +02:00

custom-providers.md

fix(providers): apply configured options to every agent provider (#5780)

2026-09-30 19:37:14 +01:00

data-model.md

Show each Paseo skill once in Codex (#5827)

2026-10-01 12:04:05 +02:00

design.md

Make Usage settings discoverable above reports (#5921)

2026-10-02 20:59:16 +01:00

development.md

fix(daemon): keep lifecycle operations on the selected instance (#4575)

2026-09-11 08:33:22 +02:00

docker.md

fix(daemon): keep lifecycle operations on the selected instance (#4575)

2026-09-11 08:33:22 +02:00

explorer-sidebar.md

Unify Explorer tabs and refine launch controls (#5942)

2026-10-03 01:20:53 +01:00

expo-router.md

Reload to the project picker after an app error (#4598)

2026-09-11 08:09:05 +02:00

file-icons.md

feat(app): sidebar display preferences, a shared menu engine, and a colour pass

2026-08-03 18:58:06 +02:00

file-observation.md

Stop the daemon holding a CPU core on a repository the watcher can't observe (#5170)

2026-09-23 22:20:17 +02:00

floating-panels.md

Keep account usage accessible before the first turn and restore compact sheets

2026-10-05 01:59:15 +01:00

forge-providers.md

Stop PR status polling from rate-limiting your entire GitHub account (#3825)

2026-08-28 11:29:34 +02:00

forms.md

Let plugins contribute settings screens (#4357)

2026-09-06 10:22:26 +02:00

glossary.md

Open Usage as a modal over the current screen (#6216)

2026-10-06 12:54:09 +01:00

hover.md

Keep account usage accessible before the first turn and restore compact sheets

2026-10-05 01:59:15 +01:00

hub.md

Let Hub title workspaces created by its executions (#5302)

2026-09-23 23:15:06 +02:00

i18n.md

Add Korean UI localization (#2895)

2026-08-05 22:47:33 +02:00

menus.md

Keep account usage accessible before the first turn and restore compact sheets

2026-10-05 01:59:15 +01:00

mobile-panels.md

fix(app): preserve mobile sidebar scroll position when reopening (#6058)

2026-10-04 14:55:24 +01:00

mobile-testing.md

fix(app): preserve mobile sidebar scroll position when reopening (#6058)

2026-10-04 14:55:24 +01:00

opencode-global-event-baseline.md

Add opt-in browser tools for desktop tabs

2026-06-30 22:33:18 +02:00

permissions.md

Let Hub title workspaces created by its executions (#5302)

2026-09-23 23:15:06 +02:00

plugins.md

Sanitize plugin overview rendering: no raw HTML, https links only, no relative links (#6244)

2026-10-06 18:31:53 +01:00

product.md

docs(product): clarify core philosophy and contribution expectations

2026-09-09 15:04:06 +02:00

protocol-compatibility.md

Make password-protected daemons work across local and remote connections (#5393)

2026-09-26 19:53:43 +02:00

protocol-validation.md

Speed up inbound WebSocket validation (#1895)

2026-07-06 00:07:54 +08:00

providers.md

fix(providers): launch plugin CLIs on Windows and tolerate Muse startup (#6151)

2026-10-05 17:10:02 +01:00

qa.md

Enforce shared, client, and server plugin SDK boundaries (#4347)

2026-09-07 23:42:28 +02:00

release.md

docs(release): fold each beta into one changelog entry for the series

2026-10-05 03:58:31 +02:00

rpc-namespacing.md

feat(usage): show each agent's own plan usage in its context window details (#5975)

2026-10-03 23:12:57 +01:00

service-proxy.md

fix(server): keep the client port in X-Forwarded-Host (#2288)

2026-07-24 21:17:16 +08:00

terminal-activity.md

fix(server): mark Claude terminals as needing input when Claude goes idle (#6022)

2026-10-04 06:10:19 +02:00

terminal-performance.md

Find text in terminal scrollback (#4650)

2026-09-15 17:46:42 +02:00

testing.md

ci: simplify and de-flake the test suite (#4868)

2026-09-15 13:26:41 +02:00

timeline-sync.md

Keep the draft-create handoff until the new chat is current (#5168)

2026-09-22 11:57:45 +02:00

unistyles.md

Restore cached conversations before reconnecting (#4421)

2026-09-07 15:52:21 +02:00