add9e8cf3c
1. Webview CSP nonce (security): Added Content-Security-Policy meta tag with nonce-based script-src to sidebar.ts. Replaced all inline onclick handlers with data-command attributes and a single delegated event listener, which CSP requires over inline handlers. 2. Dead branch in chat-participant.ts: Removed the isSlashCommand conditional that ran identical code for both paths — slash commands and regular messages both call sendPrompt() the same way. 3. Restart loop cooldown in gsd-client.ts: Added a 60-second sliding window that tracks crash timestamps. If the process crashes more than 3 times within 60 seconds, auto-restart is disabled and an error is surfaced to the user via the onError event emitter. |
||
|---|---|---|
| .. | ||
| src | ||
| package-lock.json | ||
| package.json | ||
| tsconfig.json | ||