Release Focus: Application security, chat safety, and rendering stability.

🔐 Security Improvements

• Fixed unsanitized HTML rendering in chat widget
  • Resolved a vulnerability where user-generated content could render unsafe HTML.
  • Protects against:
    • Script injection
    • Malicious markup execution
  • Significantly reduces XSS risk surface in chat flows.
• DOM text vulnerability fix
  • Patched improper DOM text handling that could allow unsafe content to be interpreted incorrectly.
  • Hardens how dynamic text is inserted into the UI.
• GitHub Code Scanning alert remediation
  • Updated GitHub workflow configuration to include proper permissions settings.
  • Ensures CI workflows follow least-privilege best practices.
  • Improves overall supply chain and CI/CD security posture.

💬 Chat Rendering Enhancements

• Updated escape functions to preserve Markdown
  • Improved content sanitization logic so:
    • Markdown formatting (bold, lists, etc.) is preserved
    • While still preventing unsafe HTML/script execution
  • Results in:
    • Safer rendering
    • Better readability of AI and user messages

🧱 Stability & Internal Quality

• Multiple merges related to security auto-fixes and vulnerability cleanups
• Reduced technical debt in chat rendering pipeline
• Improved alignment with secure coding standards

🎯 Impact Summary