Skip to content
This repository was archived by the owner on Apr 8, 2026. It is now read-only.

v3.2.1 — Security Hardening + WCAG 2.2 AA + Themes

Choose a tag to compare

View all tags
@Roberdan Roberdan released this 14 Mar 10:58
· 471 commits to main since this release
v3.2.1
055c438
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

Security

  • Sanitization module (core/sanitize.ts): escapeHtml, sanitizeHtml, isValidColor, sanitizeAttr, sanitizeSvg
  • All innerHTML paths sanitized across 15 modules
  • SVG injection blocked, color values validated, data binding property whitelist

Accessibility (WCAG 2.2 AA)

  • Canvas charts: text alternatives with role="img", aria-label, screen-reader fallback
  • Forms: aria-invalid, aria-describedby, aria-required, live regions
  • Full keyboard navigation: date picker, command palette, detail panel, drawer, tabs, org tree
  • Data table: grid roles, scope, live regions for sort/filter/pagination

Themes

  • Avorio gauge contrast fix (1.2:1 → >4.5:1)
  • Colorblind Okabe-Ito overrides for charts, gauges, controls
  • 29 hardcoded hex colors tokenized

Testing

  • 354 unit tests + 4 E2E spec files (a11y, keyboard, security, themes)

Demo

  • Curved gradient edges in social graph (Sankey-style)
  • Overlays, org tree, data binding, form validation sections
  • Fixed Linux icon on OMARCHY mesh node

Quality

  • License: MPL-2.0
  • All CSS classes use mn- prefix
  • Zero any types, zero emoji, all files under 250 lines
  • Version consistent across package.json, index.ts, esbuild banner

Full changelog: CHANGELOG.md

Assets 6
Loading