fix: validate domain_name to prevent path injection; fix toggle revert logic

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/9088415a-efc3-4dd1-9c22-877a543af47b

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-02 23:27:14 +00:00
committed by GitHub
parent b9c8c20347
commit e43552373c
2 changed files with 12 additions and 2 deletions

View File

@@ -930,9 +930,9 @@ function buildFeatureCard(feat) {
var toggleLabel = card.querySelector(".feature-toggle");
toggle.addEventListener("change", function() {
var newEnabled = toggle.checked;
// Revert visually until confirmed
// Revert visually to original state while confirmation/modal is pending
toggle.checked = feat.enabled;
if (newEnabled) { toggleLabel.classList.remove("active"); } else { toggleLabel.classList.add("active"); }
if (feat.enabled) { toggleLabel.classList.add("active"); } else { toggleLabel.classList.remove("active"); }
handleFeatureToggle(feat, newEnabled);
});