Timothy Jaeryang Baek
aedb6bef4e
refac
2026-07-14 04:15:20 -04:00
Timothy Jaeryang Baek
3bba1c2270
feat: add IFRAME_CSP env var for srcdoc iframe content security policy
...
Adds an IFRAME_CSP environment variable that injects a Content-Security-Policy
<meta> tag into all srcdoc iframes rendering untrusted content:
- Artifacts (LLM-generated HTML previews)
- FullHeightIframe (tool/embed output)
- FilePreview (user-uploaded HTML files)
- CitationModal (RAG document HTML)
Shared utility in src/lib/utils/csp.ts handles injection with HTML-safe
attribute escaping. URL-based iframes (src=) are correctly excluded.
Env-var only — no PersistentConfig, no admin UI, no DB. Set once at deploy
time, requires restart. Empty string (default) means no CSP restriction.
2026-05-11 01:56:02 +09:00
Timothy Jaeryang Baek and twheel
c3c857a3ec
refac
...
Co-Authored-By: twheel <100867139+whatisdata@users.noreply.github.com >
2026-04-20 08:59:30 +09:00
Classic298
2beeeb90c2
fix(a11y): add aria-labels to chat message components ( #21708 )
...
Add aria-labels, aria-expanded, and semantic improvements to:
- RateComment: close button, rating scale, feedback textarea
- Citations: toggle button with count, source item buttons
- Source/SourceToken: contextual aria-labels for citation buttons
- StatusHistory: toggle button with expanded state
- WebSearchResults: descriptive favicon alt text
- FollowUps: convert div to button element
- RegenerateMenu: submit suggestion button
- FloatingButtons: action buttons, input field, submit button
- CitationModal: close button
WCAG: 4.1.2 (Name, Role, Value), 2.1.1 (Keyboard), 1.1.1 (Non-text Content)
2026-02-22 14:36:42 -06:00
Timothy Jaeryang Baek
ef04a704ce
chore: format
2026-02-16 01:26:29 -06:00
Timothy Jaeryang Baek
c26e8110af
enh: renderMarkdownInPreviews
2026-02-16 01:23:56 -06:00
Timothy Jaeryang Baek
700349064d
chore: format
2026-01-08 01:55:56 +04:00
Timothy Jaeryang Baek
40c45ffe1f
feat: text fragment url in citations
2026-01-06 00:49:32 +04:00
Classic298
d5ccd95293
fix: Update CitationModal.svelte ( #20209 )
...
* Update CitationModal.svelte
* Update CitationModal.svelte
2025-12-30 14:06:11 +04:00
Timothy Jaeryang Baek
103f92c8dd
refac
2025-11-23 18:39:01 -05:00
Timothy Jaeryang Baek
ec45d77ce9
refac: sources and citations
2025-11-23 18:27:57 -05:00
Timothy Jaeryang Baek
9208a84185
refac
2025-09-13 02:33:32 +04:00
Timothy Jaeryang Baek
721ea9cbd8
refac: styling
2025-09-13 01:58:09 +04:00
Timothy Jaeryang Baek
77779b30d4
refac
2025-09-09 18:01:59 +04:00
Timothy Jaeryang Baek
d0b20df46c
refac: citations display
2025-09-09 17:27:38 +04:00
Timothy Jaeryang Baek