Stability fixes: plugin-scoped contexts for owned pages, absent-href guard, checked locale mounts

2026-08-03 23:51:40 +02:00
parent 2b20497785
commit be3bc2bdbb
28 changed files with 176 additions and 58 deletions
@@ -5,6 +5,8 @@
  handler; this renders until then. Data: model { nav, shell }.
 %><%
  const nav = include("partials/nav-tree", { nodes: model.nav });
+  // These four messages carry markup (<code> spans), so they render raw — the documented
+  // markup-carrying case. They interpolate nothing, so there is no untrusted data to escape.
  const body = `
    <div class="form-page">
      <section class="form-card">