Add safeUrl() to gate external search-result URLs into href/src (blocks javascript:/data:), parse the response body before the ok check in apiJson so non-JSON error bodies surface the real status, and hide broken evidence preview images via onerror. |
||
|---|---|---|
| .. | ||
| operator-gui | ||