Aaron D. Lee 83e9bd6fa1 Fix XSS vulnerability, request parsing bug, and session persistence ...

- Fix XSS in stegasoo.js: use textContent instead of innerHTML for filenames
- Fix operator precedence in channel key parsing (form data was ignored)
- Persist Flask secret key to instance/.secret_key so sessions survive restarts

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-03 00:08:06 -05:00

..

api

Apply black formatter to all Python files

2026-01-02 17:44:41 -05:00

cli

Remove backup files and add pattern to .gitignore

2026-01-02 18:13:04 -05:00

web

Fix XSS vulnerability, request parsing bug, and session persistence

2026-01-03 00:08:06 -05:00