René's URL Explorer Experiment


Title: Release 1.15.1 — security & correctness patch by JosunLP · Pull Request #202 · bQuery/bQuery · GitHub

Open Graph Title: Release 1.15.1 — security & correctness patch by JosunLP · Pull Request #202 · bQuery/bQuery

X Title: Release 1.15.1 — security & correctness patch by JosunLP · Pull Request #202 · bQuery/bQuery

Description: Batteries-included TypeScript framework for the modern web — signals, SSR, Web Components, routing, and more — with a jQuery-inspired API and zero mandatory build step. - Release 1.15.1 — security & correctness patch by JosunLP · Pull Request #202 · bQuery/bQuery

Open Graph Description: Release 1.15.1 — Security & correctness patch Promotes dev to main for the 1.15.1 patch release. This closes the findings of a full-codebase security & correctness audit (issues #162–#181)....

X Description: Release 1.15.1 — Security & correctness patch Promotes dev to main for the 1.15.1 patch release. This closes the findings of a full-codebase security & correctness audit (issues #16...

Opengraph URL: https://github.com/bQuery/bQuery/pull/202

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:58dd2076-4745-2d6a-a2a4-8da17763a5ea
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8D82:391A54:110F539:1794576:6A4DDF3C
html-safe-nonce7e86d38463db51f05c646ee95b37fb4b728020342e55f1a747e0c5148210fdef
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RDgyOjM5MUE1NDoxMTBGNTM5OjE3OTQ1NzY6NkE0RERGM0MiLCJ2aXNpdG9yX2lkIjoiNDIwMjIzODgxMjEyODkyNzU0OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac8897adeb104b9ef42b6cdecfeec14848ef770dfc7074e06cba10a452cc1d0e8c
hovercard-subject-tagpull_request:4002240081
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/bQuery/bQuery/202/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/a8dcd4c8384cb2662e4f3e3f3eca0fd60ead311c2e447ff06fbf98a3ba7e625e/bQuery/bQuery/pull/202
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/a8dcd4c8384cb2662e4f3e3f3eca0fd60ead311c2e447ff06fbf98a3ba7e625e/bQuery/bQuery/pull/202
og:image:altRelease 1.15.1 — Security & correctness patch Promotes dev to main for the 1.15.1 patch release. This closes the findings of a full-codebase security & correctness audit (issues #162–#181)....
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameJosunLP
hostnamegithub.com
expected-hostnamegithub.com
None06b8a6144231bf3a234f1c2e9993861e07ce98a905912b114aa386c2d7e84b33
turbo-cache-controlno-cache
go-importgithub.com/bQuery/bQuery git https://github.com/bQuery/bQuery.git
octolytics-dimension-user_id256381806
octolytics-dimension-user_loginbQuery
octolytics-dimension-repository_id1139284244
octolytics-dimension-repository_nwobQuery/bQuery
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id1139284244
octolytics-dimension-repository_network_root_nwobQuery/bQuery
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release1d344bdb7547fe6bca17a59bb2b8aac3dc9532a0
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/bQuery/bQuery/pull/202#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FbQuery%2FbQuery%2Fpull%2F202
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FbQuery%2FbQuery%2Fpull%2F202
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=bQuery%2FbQuery
Reloadhttps://github.com/bQuery/bQuery/pull/202
Reloadhttps://github.com/bQuery/bQuery/pull/202
Reloadhttps://github.com/bQuery/bQuery/pull/202
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
bQuery https://github.com/bQuery
bQueryhttps://github.com/bQuery/bQuery
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
Notifications https://github.com/login?return_to=%2FbQuery%2FbQuery
Fork 0 https://github.com/login?return_to=%2FbQuery%2FbQuery
Star 1 https://github.com/login?return_to=%2FbQuery%2FbQuery
Code https://github.com/bQuery/bQuery
Issues 0 https://github.com/bQuery/bQuery/issues
Pull requests 0 https://github.com/bQuery/bQuery/pulls
Actions https://github.com/bQuery/bQuery/actions
Security and quality 0 https://github.com/bQuery/bQuery/security
Insights https://github.com/bQuery/bQuery/pulse
Code https://github.com/bQuery/bQuery
Issues https://github.com/bQuery/bQuery/issues
Pull requests https://github.com/bQuery/bQuery/pulls
Actions https://github.com/bQuery/bQuery/actions
Security and quality https://github.com/bQuery/bQuery/security
Insights https://github.com/bQuery/bQuery/pulse
JosunLPhttps://github.com/JosunLP
mainhttps://github.com/bQuery/bQuery/tree/main
devhttps://github.com/bQuery/bQuery/tree/dev
Conversationhttps://github.com/bQuery/bQuery/pull/202
Commits25 (25)https://github.com/bQuery/bQuery/pull/202/commits
Checkshttps://github.com/bQuery/bQuery/pull/202/checks
Files changedhttps://github.com/bQuery/bQuery/pull/202/files
Release 1.15.1 — security & correctness patchhttps://github.com/bQuery/bQuery/pull/202#top
JosunLPhttps://github.com/JosunLP
mainhttps://github.com/bQuery/bQuery/tree/main
devhttps://github.com/bQuery/bQuery/tree/dev
https://github.com/JosunLP
JosunLPhttps://github.com/JosunLP
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#issue-4823211530
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
#162https://github.com/bQuery/bQuery/issues/162
#181https://github.com/bQuery/bQuery/issues/181
#162https://github.com/bQuery/bQuery/issues/162
#163https://github.com/bQuery/bQuery/issues/163
#164https://github.com/bQuery/bQuery/issues/164
#168https://github.com/bQuery/bQuery/issues/168
#167https://github.com/bQuery/bQuery/issues/167
#169https://github.com/bQuery/bQuery/issues/169
#171https://github.com/bQuery/bQuery/issues/171
#176https://github.com/bQuery/bQuery/issues/176
#179https://github.com/bQuery/bQuery/issues/179
#174https://github.com/bQuery/bQuery/issues/174
#175https://github.com/bQuery/bQuery/issues/175
#181https://github.com/bQuery/bQuery/issues/181
#165https://github.com/bQuery/bQuery/issues/165
#166https://github.com/bQuery/bQuery/issues/166
#170https://github.com/bQuery/bQuery/issues/170
#172https://github.com/bQuery/bQuery/issues/172
#173https://github.com/bQuery/bQuery/issues/173
#177https://github.com/bQuery/bQuery/issues/177
#178https://github.com/bQuery/bQuery/issues/178
#180https://github.com/bQuery/bQuery/issues/180
Claude Codehttps://claude.com/claude-code
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
JosunLPhttps://github.com/JosunLP
July 6, 2026 21:10https://github.com/bQuery/bQuery/pull/202#commits-pushed-1e59261
https://github.com/JosunLP
https://github.com/claude
fix(security): escape mXSS-detection text fallback in sanitizeHtmlCore (https://github.com/bQuery/bQuery/pull/202/commits/1e5926141a963f4a1f31bcc80c93f108cdbef99a
1e59261https://github.com/bQuery/bQuery/pull/202/commits/1e5926141a963f4a1f31bcc80c93f108cdbef99a
#182https://github.com/bQuery/bQuery/pull/182
#162https://github.com/bQuery/bQuery/issues/162
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
fix(ssr): escape bq-text values on raw-text elements in pure renderer (https://github.com/bQuery/bQuery/pull/202/commits/b5828a77d1abedce73960019f1f4ea2e2e07dc3e
…https://github.com/bQuery/bQuery/pull/183
b5828a7https://github.com/bQuery/bQuery/pull/202/commits/b5828a77d1abedce73960019f1f4ea2e2e07dc3e
…#183https://github.com/bQuery/bQuery/pull/183
https://github.com/JosunLP
https://github.com/claude
fix(store): snapshot subscribers before notifying (https://github.com/bQuery/bQuery/pull/202/commits/ebf8a936c84e9515b7642ee46c92d188d04c4ed8
#185https://github.com/bQuery/bQuery/pull/185
)https://github.com/bQuery/bQuery/pull/202/commits/ebf8a936c84e9515b7642ee46c92d188d04c4ed8
ebf8a93https://github.com/bQuery/bQuery/pull/202/commits/ebf8a936c84e9515b7642ee46c92d188d04c4ed8
#165https://github.com/bQuery/bQuery/issues/165
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
fix(reactive): bound self-triggered effect re-runs instead of recursi…https://github.com/bQuery/bQuery/pull/202/commits/4d2e4dd19ffd8f31d82f173fdb97ce5aa2c682d8
4d2e4ddhttps://github.com/bQuery/bQuery/pull/202/commits/4d2e4dd19ffd8f31d82f173fdb97ce5aa2c682d8
#186https://github.com/bQuery/bQuery/pull/186
https://github.com/JosunLP
https://github.com/claude
fix(ssr): route DOM-backed evaluator through the CSP-safe parser (https://github.com/bQuery/bQuery/pull/202/commits/27caa67bfc3f5d7b3e7818de9d3a82949cb06671
#187https://github.com/bQuery/bQuery/pull/187
)https://github.com/bQuery/bQuery/pull/202/commits/27caa67bfc3f5d7b3e7818de9d3a82949cb06671
27caa67https://github.com/bQuery/bQuery/pull/202/commits/27caa67bfc3f5d7b3e7818de9d3a82949cb06671
#167https://github.com/bQuery/bQuery/issues/167
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(view/compiler): bail on unterminated strings and invalid numeric …https://github.com/bQuery/bQuery/pull/202/commits/6adff7f892dbe071013199a771fc45be648d40d3
6adff7fhttps://github.com/bQuery/bQuery/pull/202/commits/6adff7f892dbe071013199a771fc45be648d40d3
#190https://github.com/bQuery/bQuery/pull/190
#170https://github.com/bQuery/bQuery/issues/170
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(security): wire Trusted Types into the framework's HTML sinks (https://github.com/bQuery/bQuery/pull/202/commits/f8d5c639794fa71ca3607db0cd13438848892a95
#191https://github.com/bQuery/bQuery/pull/191
)https://github.com/bQuery/bQuery/pull/202/commits/f8d5c639794fa71ca3607db0cd13438848892a95
f8d5c63https://github.com/bQuery/bQuery/pull/202/commits/f8d5c639794fa71ca3607db0cd13438848892a95
#171https://github.com/bQuery/bQuery/issues/171
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(reactive): abort superseded in-flight fetch on overlapping execute (https://github.com/bQuery/bQuery/pull/202/commits/39736375d96771e031e90de5b78387f4fede30b8
3973637https://github.com/bQuery/bQuery/pull/202/commits/39736375d96771e031e90de5b78387f4fede30b8
#192https://github.com/bQuery/bQuery/pull/192
#172https://github.com/bQuery/bQuery/issues/172
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(reactive/concurrency): give composables a disposal path (https://github.com/bQuery/bQuery/pull/202/commits/213bfea0ecc4b72d10985503b3ad8943ddcba614
#193https://github.com/bQuery/bQuery/pull/193
)https://github.com/bQuery/bQuery/pull/202/commits/213bfea0ecc4b72d10985503b3ad8943ddcba614
213bfeahttps://github.com/bQuery/bQuery/pull/202/commits/213bfea0ecc4b72d10985503b3ad8943ddcba614
#173https://github.com/bQuery/bQuery/issues/173
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(i18n): use own-property checks for placeholder and key resolution (https://github.com/bQuery/bQuery/pull/202/commits/bd0cf9e31cfc94e267aa1827bb3b3fef08792f69
…https://github.com/bQuery/bQuery/pull/194
bd0cf9ehttps://github.com/bQuery/bQuery/pull/202/commits/bd0cf9e31cfc94e267aa1827bb3b3fef08792f69
…#194https://github.com/bQuery/bQuery/pull/194
#174https://github.com/bQuery/bQuery/issues/174
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(store): guard deepClone against __proto__ key reassignment (https://github.com/bQuery/bQuery/pull/202/commits/2d2a40edb68403109948bad8f68b909ca71b1b06
#195https://github.com/bQuery/bQuery/pull/195
)https://github.com/bQuery/bQuery/pull/202/commits/2d2a40edb68403109948bad8f68b909ca71b1b06
2d2a40ehttps://github.com/bQuery/bQuery/pull/202/commits/2d2a40edb68403109948bad8f68b909ca71b1b06
#175https://github.com/bQuery/bQuery/issues/175
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(ssr): insert titleTemplate title literally (https://github.com/bQuery/bQuery/pull/202/commits/dfea40f4a8611ecb19ca95edb060ebc2f9bca6b3
#197https://github.com/bQuery/bQuery/pull/197
)https://github.com/bQuery/bQuery/pull/202/commits/dfea40f4a8611ecb19ca95edb060ebc2f9bca6b3
dfea40fhttps://github.com/bQuery/bQuery/pull/202/commits/dfea40f4a8611ecb19ca95edb060ebc2f9bca6b3
#177https://github.com/bQuery/bQuery/issues/177
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(security): strengthen DOM-clobbering defenses (https://github.com/bQuery/bQuery/pull/202/commits/ae34e2694b553c1312248227a422ef63273c64bd
#199https://github.com/bQuery/bQuery/pull/199
)https://github.com/bQuery/bQuery/pull/202/commits/ae34e2694b553c1312248227a422ef63273c64bd
ae34e26https://github.com/bQuery/bQuery/pull/202/commits/ae34e2694b553c1312248227a422ef63273c64bd
#179https://github.com/bQuery/bQuery/issues/179
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(view): invoke bq-on handlers via evaluation, not a paren heuristic (https://github.com/bQuery/bQuery/pull/202/commits/d6cafe9dcdfeecfb19d2afaffebcaa0055bcc3e8
d6cafe9https://github.com/bQuery/bQuery/pull/202/commits/d6cafe9dcdfeecfb19d2afaffebcaa0055bcc3e8
#200https://github.com/bQuery/bQuery/pull/200
#180https://github.com/bQuery/bQuery/issues/180
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(server): default file-route loader middleware to action middleware (https://github.com/bQuery/bQuery/pull/202/commits/a2323f8e653c04e569e11f180958920cfaf442b7
a2323f8https://github.com/bQuery/bQuery/pull/202/commits/a2323f8e653c04e569e11f180958920cfaf442b7
#201https://github.com/bQuery/bQuery/pull/201
#181https://github.com/bQuery/bQuery/issues/181
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(view): shadow dangerous globals in with-scoped evaluator (https://github.com/bQuery/bQuery/pull/202/commits/8e6d337aba9f4b7a3913d7d9b6680f7687fbc5a0
#188https://github.com/bQuery/bQuery/pull/188
)https://github.com/bQuery/bQuery/pull/202/commits/8e6d337aba9f4b7a3913d7d9b6680f7687fbc5a0
8e6d337https://github.com/bQuery/bQuery/pull/202/commits/8e6d337aba9f4b7a3913d7d9b6680f7687fbc5a0
#168https://github.com/bQuery/bQuery/issues/168
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(ssr): validate bq-style declarations in the pure renderer (https://github.com/bQuery/bQuery/pull/202/commits/4050f2458f5af6f850cdb4ccbd8fd1a5a275115c
#196https://github.com/bQuery/bQuery/pull/196
)https://github.com/bQuery/bQuery/pull/202/commits/4050f2458f5af6f850cdb4ccbd8fd1a5a275115c
4050f24https://github.com/bQuery/bQuery/pull/202/commits/4050f2458f5af6f850cdb4ccbd8fd1a5a275115c
#176https://github.com/bQuery/bQuery/issues/176
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(core): stop debounce double-invoking a single leading+trailing ca…https://github.com/bQuery/bQuery/pull/202/commits/c8bc8a366bd0fd590f5a92eae7f943f9048bad86
c8bc8a3https://github.com/bQuery/bQuery/pull/202/commits/c8bc8a366bd0fd590f5a92eae7f943f9048bad86
#198https://github.com/bQuery/bQuery/pull/198
#178https://github.com/bQuery/bQuery/issues/178
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(server): default session and CSRF cookies to Secure (https://github.com/bQuery/bQuery/pull/202/commits/9a327f053bdb5479dec2c64e008a0ef5cd6afb34
#189https://github.com/bQuery/bQuery/pull/189
)https://github.com/bQuery/bQuery/pull/202/commits/9a327f053bdb5479dec2c64e008a0ef5cd6afb34
9a327f0https://github.com/bQuery/bQuery/pull/202/commits/9a327f053bdb5479dec2c64e008a0ef5cd6afb34
#169https://github.com/bQuery/bQuery/issues/169
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
https://github.com/claude
fix(view/ssr): guard bq-bind attribute values against XSS sinks (https://github.com/bQuery/bQuery/pull/202/commits/295efd8187043700f6b5e75ea56ac2ce6f432c84
#184https://github.com/bQuery/bQuery/pull/184
)https://github.com/bQuery/bQuery/pull/202/commits/295efd8187043700f6b5e75ea56ac2ce6f432c84
295efd8https://github.com/bQuery/bQuery/pull/202/commits/295efd8187043700f6b5e75ea56ac2ce6f432c84
#164https://github.com/bQuery/bQuery/issues/164
https://claude.com/claude-codehttps://claude.com/claude-code
https://github.com/JosunLP
chore: update devDependencies to latest versionshttps://github.com/bQuery/bQuery/pull/202/commits/1e0e1f0813bd42f18c9fcab4048a3dd3a01ac49d
1e0e1f0https://github.com/bQuery/bQuery/pull/202/commits/1e0e1f0813bd42f18c9fcab4048a3dd3a01ac49d
https://github.com/JosunLP
https://github.com/claude
chore(release): 1.15.1https://github.com/bQuery/bQuery/pull/202/commits/6f108447c17fd23ef75a33ee573a57c2467fdd63
6f10844https://github.com/bQuery/bQuery/pull/202/commits/6f108447c17fd23ef75a33ee573a57c2467fdd63
#162https://github.com/bQuery/bQuery/issues/162
#181https://github.com/bQuery/bQuery/issues/181
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
core https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Acore
reactive https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Areactive
security https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Asecurity
store https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Astore
view https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Aview
docs https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Adocs
tests https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Atests
build https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Abuild
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#event-27632387324
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
i18n https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Ai18n
ssr https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Assr
concurrency https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Aconcurrency
server https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Aserver
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#event-27632387488
https://github.com/apps/coderabbitai
coderabbitaihttps://github.com/apps/coderabbitai
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#issuecomment-4897750928
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://app.coderabbit.ai/change-stack/bQuery/bQuery/pull/202?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack
[Medium][security] Trusted Types advertised but never wired into DOM-write sinks #171https://github.com/bQuery/bQuery/issues/171
[Critical][security] mXSS-detection fallback returns unescaped textContent → XSS via all HTML sinks #162https://github.com/bQuery/bQuery/issues/162
[Low][core] debounce({leading,trailing}) double-invokes on a single call #178https://github.com/bQuery/bQuery/issues/178
[Low][i18n] interpolate/ICU resolve inherited Object.prototype names via 'in' operator (contract violation) #174https://github.com/bQuery/bQuery/issues/174
[Medium][reactive] useAsyncData/useFetch overlapping executions are not aborted (request pile-up) #172https://github.com/bQuery/bQuery/issues/172
[High][view] bq-bind writes unsanitized values to URL/event-handler/srcdoc attributes (DOM-XSS) #164https://github.com/bQuery/bQuery/issues/164
[Low][security] DOM-clobbering protection is a small denylist; generic id/name clobbering passes #179https://github.com/bQuery/bQuery/issues/179
[Low][server] File-route loader dataMiddlewares separate from middlewares → auth-bypass footgun #181https://github.com/bQuery/bQuery/issues/181
[Medium][server] Session and CSRF cookies are not Secure by default #169https://github.com/bQuery/bQuery/issues/169
[High][store] notifySubscribers iterates live array → subscribers skipped on unsubscribe-during-notify #165https://github.com/bQuery/bQuery/issues/165
[Low][store] deepClone does not guard __proto__ key → clone prototype reassignment #175https://github.com/bQuery/bQuery/issues/175
[Medium][view] Compiler emits ok:true for unterminated/invalid literals → poisons whole compiled module #170https://github.com/bQuery/bQuery/issues/170
CodeRabbithttps://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=bQuery/bQuery&utm_content=202
Xhttps://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai
Mastodonhttps://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai
Reddithttps://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai
LinkedInhttps://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://github.com/JosunLP
chore: remove outdated release notes for version 1.14.2 and tidy up b…https://github.com/bQuery/bQuery/pull/202/commits/e417e9e7478013eec227e2e64c1726be339c498d
e417e9ehttps://github.com/bQuery/bQuery/pull/202/commits/e417e9e7478013eec227e2e64c1726be339c498d
https://github.com/JosunLP
JosunLPhttps://github.com/JosunLP
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#event-27632809637
https://github.com/apps/coderabbitai
coderabbitaihttps://github.com/apps/coderabbitai
Jul 6, 2026 https://github.com/bQuery/bQuery/pull/202#pullrequestreview-4639917945
View reviewed changes https://github.com/bQuery/bQuery/pull/202/files/6f108447c17fd23ef75a33ee573a57c2467fdd63
coderabbitaihttps://github.com/apps/coderabbitai
https://github.com/bQuery/bQuery/pull/202#pullrequestreview-4639917945
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
b43c847https://github.com/bQuery/bQuery/commit/b43c8477e9df5b100ebb056ff3e328460c013306
6f10844https://github.com/bQuery/bQuery/commit/6f108447c17fd23ef75a33ee573a57c2467fdd63
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
src/security/trusted-types.tshttps://github.com/bQuery/bQuery/pull/202/files/6f108447c17fd23ef75a33ee573a57c2467fdd63#diff-6ec1db1b4adf00f7e9866a9dd032678693af230688760f50337f601fd5f645fe
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
src/store/utils.tshttps://github.com/bQuery/bQuery/pull/202/files/6f108447c17fd23ef75a33ee573a57c2467fdd63#diff-144f30f471f384a6f85bb4cf1c63c62a0105f7b15e7167850727e233b8a46f4b
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
src/view/compiler/expression.tshttps://github.com/bQuery/bQuery/pull/202/files/6f108447c17fd23ef75a33ee573a57c2467fdd63#diff-b2e9838b7ce4ff6d1007568720cc3df3cda5fc1bcec1b148f200f02e9d2337cb
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
src/view/evaluate.tshttps://github.com/bQuery/bQuery/pull/202/files/6f108447c17fd23ef75a33ee573a57c2467fdd63#diff-5447b967ccc6b280920d6b182e824a71c4e65c35ed0757a51663a24b12551693
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://github.com/JosunLP
https://github.com/claude
fix(review): address CodeRabbit findings on the 1.15.1 release PRhttps://github.com/bQuery/bQuery/pull/202/commits/418d3ddcea07df6cf42080877304c49ee2660848
418d3ddhttps://github.com/bQuery/bQuery/pull/202/commits/418d3ddcea07df6cf42080877304c49ee2660848
@examplehttps://github.com/example
https://github.com/JosunLP
JosunLPhttps://github.com/JosunLP
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#issuecomment-4897949173
418d3ddhttps://github.com/bQuery/bQuery/commit/418d3ddcea07df6cf42080877304c49ee2660848
@coderabbitaihttps://github.com/coderabbitai
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://github.com/apps/coderabbitai
coderabbitaihttps://github.com/apps/coderabbitai
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#issuecomment-4897954166
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
418d3ddhttps://github.com/bQuery/bQuery/commit/418d3ddcea07df6cf42080877304c49ee2660848
review instructionshttps://docs.coderabbit.ai/guides/review-instructions
apphttps://app.coderabbit.ai/learnings
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://github.com/JosunLP
chore: update devDependencies to latest versionshttps://github.com/bQuery/bQuery/pull/202/commits/da40db2ad22dc0b86286f7d32d006cec185b46d4
da40db2https://github.com/bQuery/bQuery/pull/202/commits/da40db2ad22dc0b86286f7d32d006cec185b46d4
https://github.com/JosunLP
JosunLPhttps://github.com/JosunLP
d6b8e30https://github.com/bQuery/bQuery/commit/d6b8e3053b73155712f0b2e73646481cbe839ff1
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#event-27634528382
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://github.com/apps/coderabbitai
coderabbitaihttps://github.com/apps/coderabbitai
Jul 6, 2026 https://github.com/bQuery/bQuery/pull/202#pullrequestreview-4640229091
View reviewed changes https://github.com/bQuery/bQuery/pull/202/files/da40db2ad22dc0b86286f7d32d006cec185b46d4
coderabbitaihttps://github.com/apps/coderabbitai
https://github.com/bQuery/bQuery/pull/202#pullrequestreview-4640229091
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
6f10844https://github.com/bQuery/bQuery/commit/6f108447c17fd23ef75a33ee573a57c2467fdd63
da40db2https://github.com/bQuery/bQuery/commit/da40db2ad22dc0b86286f7d32d006cec185b46d4
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
src/view/compiler/expression.tshttps://github.com/bQuery/bQuery/pull/202/files/da40db2ad22dc0b86286f7d32d006cec185b46d4#diff-b2e9838b7ce4ff6d1007568720cc3df3cda5fc1bcec1b148f200f02e9d2337cb
coderabbitaihttps://github.com/apps/coderabbitai
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#discussion_r3532442571
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
src/view/dangerous-access.tshttps://github.com/bQuery/bQuery/pull/202/files/da40db2ad22dc0b86286f7d32d006cec185b46d4#diff-f5753b4f597dfb4c86e1500ff11fc41e9dccb172c3d079bd79fa386d348a1e35
coderabbitaihttps://github.com/apps/coderabbitai
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#discussion_r3532442579
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
tests/view.test.tshttps://github.com/bQuery/bQuery/pull/202/files/da40db2ad22dc0b86286f7d32d006cec185b46d4#diff-40c904250da66efa1eb8d2b70c52887ab1577d021cfc85f8653b819922cfe763
coderabbitaihttps://github.com/apps/coderabbitai
Jul 6, 2026https://github.com/bQuery/bQuery/pull/202#discussion_r3532442583
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://github.co/hiddenchars
https://github.com/bQuery/bQuery/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FbQuery%2FbQuery%2Fpull%2F202
https://github.com/apps/coderabbitai
coderabbitai[bot] https://github.com/apps/coderabbitai
https://github.com/bQuery/bQuery/pull/202/files/da40db2ad22dc0b86286f7d32d006cec185b46d4
https://github.com/JosunLP
JosunLP https://github.com/JosunLP
build https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Abuild
concurrency https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Aconcurrency
core https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Acore
docs https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Adocs
i18n https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Ai18n
reactive https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Areactive
security https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Asecurity
server https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Aserver
ssr https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Assr
store https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Astore
tests https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Atests
view https://github.com/bQuery/bQuery/issues?q=state%3Aopen%20label%3Aview
Please reload this pagehttps://github.com/bQuery/bQuery/pull/202
https://github.com/JosunLP
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.