refactor(ui) + security: view lifecycle, one implementation per control, and the pkexec/XSS fixes - #40

Merged

vietanhdev merged 9 commits into

mainfrom

frontend/ui-and-security-combined

Jul 20, 2026

Commits on Jul 20, 2026

security(frontend): escape untrusted strings and set a real CSP
vietanhdev
committed
d4f8ac0
security: one safe path for running a script as root
vietanhdev
committed
deebec1
fix: battery thresholds now grantable, and MCP stops stealing the OAuth port
vietanhdev
committed
e134454
refactor(ui): give views a lifecycle, and make dialogs keyboard-usable
vietanhdev
committed
76c1f7c
refactor(ui): one implementation each for hardware controls and log panels
vietanhdev
committed
1ff3290
docs(ui): say what each control does and what it costs
vietanhdev
committed
9868742
fix: route the last two threshold callers through one lookup
vietanhdev
committed
29eb697
fix(ui): canvas hit-testing, and make init failures survivable
vietanhdev
committed
594d744
fix(ui): two controls that could disagree with the hardware
vietanhdev
committed
4e56c7c