m038 7dc7caee26 fix: sanitise trip slug on input, escape single quotes in YAML frontmatter ...

Fix D: apply _sanitise_slug() to grav_trip_slug in POST /select before
storing in TripState, preventing path traversal via ../sequences.

Fix E: add _yaml_str() helper that doubles single quotes; apply to title,
location_city, and location_country in both run_export and overwrite_export
frontmatter blocks, preventing invalid YAML for values like Xi'an.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-21 17:24:22 +02:00

..

__init__.py

feat: scaffold travel-memories Flask app and test infrastructure

2026-06-21 15:46:32 +02:00

albums.py

fix: sanitise trip slug on input, escape single quotes in YAML frontmatter

2026-06-21 17:24:22 +02:00

curate.py

fix: curate swap endpoint name, reorder date field, 404 on missing asset

2026-06-21 16:37:25 +02:00

export.py

fix: sanitise trip slug on input, escape single quotes in YAML frontmatter

2026-06-21 17:24:22 +02:00

group.py

feat: Phase 4 grouping with entry-break dividers

2026-06-21 16:44:54 +02:00

nav.py

feat: add base shell, notes panel, back-navigation with stale propagation

2026-06-21 16:08:21 +02:00

notes.py

fix: correct Alpine scope for notes panel, tojson escaping, remove dead code

2026-06-21 16:11:41 +02:00

proxy.py

feat: add Immich API client and photo proxy routes

2026-06-21 15:55:26 +02:00

triage.py

feat: Phase 2 triage with keyboard shortcuts J/S/X

2026-06-21 16:26:53 +02:00

write.py

fix: enforce write phase completion gate and wire done endpoint

2026-06-21 16:58:03 +02:00