5 Commits
Author SHA1 Message Date
Vijay Janapa Reddi c8b887249c docs: generalize internal rule-file references in comments
Replace pointers to the private project rules/docs tree (relative .claude/rules
and .claude/docs paths) in code comments and docstrings with neutral phrasing
("the project prose style guide", etc.). Load-bearing runtime paths that the
tooling reads or writes are left intact.
2026-05-30 17:32:19 -04:00
Vijay Janapa Reddi 6860c2459f Centralize book checks in Binder CLI 2026-05-30 13:41:34 -04:00
Vijay Janapa Reddi 186b09fbb8 fix: address CodeQL code scanning alerts 2026-05-10 18:00:17 -04:00
Vijay Janapa Reddi 5b3e84051c fix(security): CodeQL — Actions permissions, DOM XSS, sanitization, audit regex
- Workflow: default contents:read for jobs without explicit permissions
- audit_math_rendering: match </script> and </style> with optional whitespace
- SocratiQ: tooltip via DOM APIs; iterative HTML stripping; quote normalization
  for JSON repair; repeat-until-stable tag cleanup in SR/copy flows
- Rebuild bundle.js for Quarto embed path
2026-05-10 17:13:23 -04:00
Vijay Janapa Reddi a9f86f89e6 chore(tools): preserve math-rendering audit scripts in tools/audit/
Three reusable scanners salvaged from the April 2026 math-rendering audit
(branch audit/math-rendering, now retired):

- audit_math_rendering.py - HTML build + LaTeX-leak scanner
- audit_math_pdf.py       - PDF build + page-image rendering for spot-checks
- audit_pdf_spot_check.py - regex-driven manifest of fix sites in PDFs

These are useful for any future regression check after a Quarto upgrade
or a large prose edit. Output paths (audit-*-report.{md,json},
audit-pdf-output/) are gitignored so the artifacts stay local.
2026-04-21 16:07:06 -04:00