feat: sanitize rich clipboard HTML - #65

Draft

seonghobae wants to merge 86 commits into

mainfrom

feat/safe-rich-clipboard

Commits on Aug 5, 2026

docs: design safe rich clipboard ingestion
seonghobae
committed
b33cde3
docs: plan safe rich clipboard implementation
seonghobae
committed
c33d642
test(clipboard): define safe rich paste contract
seonghobae
committed
c9ab5f8
feat(clipboard): implement bounded rich HTML sanitizer
seonghobae
committed
16272b5
feat(clipboard): add sanitizer to shared editor kit
seonghobae
committed
6e0115b
test(clipboard): cover shared kit configuration
seonghobae
committed
f3f0d67
feat(clipboard): expose editor paste policy props
seonghobae
committed
c71acb0
feat(clipboard): wire standalone paste policy
seonghobae
committed
d06701a
feat(clipboard): wire collaborative paste policy
seonghobae
committed
54736e2
test(clipboard): cover standalone editor integration
seonghobae
committed
7d8d1de
test(clipboard): cover collaborative editor integration
seonghobae
committed
23b486d
test(clipboard): use inferred extension contract
seonghobae
committed
1a6b0eb
feat(clipboard): export safe rich paste API
seonghobae
committed
e52c39a
docs(clipboard): add operator security guide
seonghobae
committed
2faf969
docs(doctoring): record safe rich clipboard boundary
seonghobae
committed
ffb85f2
docs: add Inkspan architecture and trust boundaries
seonghobae
committed
4168586
docs(changelog): record safe rich clipboard slice
seonghobae
committed
34baf71
fix(clipboard): type paste transform input
seonghobae
committed
26cd91f
test(clipboard): preserve untrusted configuration identity
seonghobae
committed
9d30ecb
test(clipboard): use deterministic accessor spy
seonghobae
committed
80a5233
test(clipboard): defer standalone config validation to paste
seonghobae
committed
dc85544
test(clipboard): defer collaborative config validation
seonghobae
committed
cc4b05d
fix(clipboard): validate preserved host config at paste
seonghobae
committed
a1c952e
fix(clipboard): preserve host config until paste validation
seonghobae
committed
2c67c41
test(clipboard): cover hidden-style and transform-order regressions
seonghobae
committed
9f188f2
fix(clipboard): harden Office hiding and final transform order
seonghobae
committed
f948fdd
test(clipboard): assert removed elements through parsed output
seonghobae
committed
c34a5bb
test(clipboard): inspect unwrapped elements structurally
seonghobae
committed
e2998b9
test(docs): require clipboard assurance boundaries
seonghobae
committed
bae6033
docs(clipboard): define paste and browser assurance boundaries
seonghobae
committed
0772cf1
docs(doctoring): record clipboard residual assurance risk
seonghobae
committed
aa23f03
docs(changelog): record clipboard assurance hardening
seonghobae
committed
a387a09
test(ci): require immutable exact-head verification
seonghobae
committed
41c91b3
ci: verify immutable exact pull-request heads
seonghobae
committed
e2fff37
test(docs): require reconciled clipboard design records
seonghobae
committed
7e48536
test: normalize clipboard documentation contracts
seonghobae
committed
94df928
docs(clipboard): reconcile reviewed design and assurance limits
seonghobae
committed
db038d2
docs(clipboard): reconcile implementation plan after review
seonghobae
committed
94ed221
test: cover clipboard fail-closed branches
seonghobae
committed
610318d
test(clipboard): cover absent ambient DOM branch
seonghobae
committed
c3615e5
test(clipboard): cover CSS-escaped hidden declarations
seonghobae
committed
e15104b
test(clipboard): cover CSS escape decoding boundaries
seonghobae
committed
8991804
fix(clipboard): decode bounded CSS escapes for hidden content
seonghobae
committed
5fe4915
test(docs): require CSS escape assurance evidence
seonghobae
committed
8a704b6
docs(clipboard): document bounded CSS escape decoding
seonghobae
committed
0be036e
docs(doctoring): record CSS escape hidden-content defense
seonghobae
committed
b7aa88b
test(docs): bind CSS escape decision to doctoring addendum
seonghobae
committed
cc8797b
docs: record CSS-escaped Office hidden handling
seonghobae
committed
d01dceb
test: close residual clipboard branch coverage
seonghobae
committed
3096782
test(clipboard): cover EOF-terminated CSS comments
seonghobae
committed
dac8fef
fix(clipboard): consume EOF-terminated CSS comments
seonghobae
committed
e6d51c9
docs(clipboard): record EOF CSS comment boundary
seonghobae
committed
e12fec9
docs(clipboard): document EOF comment handling
seonghobae
committed
ae38958
docs(changelog): record EOF CSS comment hardening
seonghobae
committed
fd3b5ae
test(clipboard): reject title metadata subtrees
seonghobae
committed
c116170
fix(clipboard): drop title metadata subtrees
seonghobae
committed
d9fcc0f
test(clipboard): expose closed disclosure text leakage
seonghobae
committed
eebf18a
fix(clipboard): exclude closed interactive content
seonghobae
committed
e84261e
docs(clipboard): define closed interactive content boundary
seonghobae
committed
2e52ec5
docs(doctoring): record closed interactive clipboard boundary
seonghobae
committed
f0b0e49
docs(changelog): record closed interactive sanitizer hardening
seonghobae
committed
111925b
test(docs): bind closed interactive clipboard policy
seonghobae
committed
ba97291
test: reject native-widget fallback text
seonghobae
committed
6e6d48f
fix: drop native-widget fallback subtrees
seonghobae
committed
01683cc
docs: record fallback-content boundary
seonghobae
committed
2269d36
docs: explain fallback-content sanitization
seonghobae
committed
6ab2272
docs: record fallback-content change
seonghobae
committed
aa7a556
test: bind fallback-content documentation
seonghobae
committed
75e96eb
test(clipboard): expose hidden datalist fallback text
seonghobae
committed
a48d81e
fix(clipboard): drop hidden datalist suggestion content
seonghobae
committed
ec5d602
docs(clipboard): record hidden datalist boundary
seonghobae
committed
5a17ec2
docs(clipboard): document hidden datalist suggestions
seonghobae
committed
80e073c
test(docs): require datalist visibility evidence
seonghobae
committed
491e97e
docs(changelog): record datalist visibility boundary
seonghobae
committed
83429c3
docs(clipboard): correct interactive record date metadata
seonghobae
committed
8335871
docs(clipboard): correct native fallback decision date
seonghobae
committed
d356f08
docs(clipboard): synchronize hidden boundaries and memory claims
seonghobae
committed
602bcd2
docs(clipboard): correct review defect count
seonghobae
committed
f8c24f6
test(clipboard): prove representative Word capacity
seonghobae
committed
46e744e
docs(types): clarify clipboard policy lifecycle
seonghobae
committed
04657df
test(clipboard): require one safe-link policy decision
seonghobae
committed
6dadce2
refactor(clipboard): reuse safe-link classification
seonghobae
committed
00d163e

Commits on Aug 6, 2026