fix: web client security, stability, and deployment improvements - #17

Merged

rophy merged 12 commits into

fix/sanitize-status-messages

Aug 22, 2026

Commits on Aug 22, 2026

fix(web): sanitize server-supplied status messages (XSS)
rophy
committed
7c5355b
fix: ensure libsodium is initialized before crypto operations
rophy
committed
63a86e5
fix: don't treat default PunchHoleResponse failure (0) as ID_NOT_EXIST
rophy
committed
ee9970e
fix: handle VP9 decoder readiness and lifecycle in web client
rophy
committed
51badca
fix: clean up PCMPlayer during audio reinitialization
rophy
committed
0bf5bac
fix: rename window.confirm override and guard getConn() in password handler
rophy
committed
a6d9bad
fix: resolve duplicate 'password' element ID in web client HTML
rophy
committed
34ceb85
refactor: replace polling in Websock.next() with event-driven delivery
rophy
committed
fee278a
feat: support path-based WebSocket URIs with auto scheme selection
rophy
committed
0ccf022
fix: address CodeRabbit review findings
rophy
committed
583afce
fix: use consistent /hbbs /hbbr paths in wss:// README example
rophy
committed
02cb3c1
test: add behavioral ui tests and websock FIFO concurrency tests
rophy
committed
a8ce231