Aaron D. Lee 83e9bd6fa1 Fix XSS vulnerability, request parsing bug, and session persistence ...

- Fix XSS in stegasoo.js: use textContent instead of innerHTML for filenames
- Fix operator precedence in channel key parsing (form data was ignored)
- Persist Flask secret key to instance/.secret_key so sessions survive restarts

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-03 00:08:06 -05:00

..

stegasoo.js

Fix XSS vulnerability, request parsing bug, and session persistence

2026-01-03 00:08:06 -05:00