v1.1.1 — Viewer security fix

Security

• Diagram viewer (DOM-XSS): model values were inserted as HTML without escaping in the subnet panel (gateways), the overview (device types, VLAN names) and the class attribute of status pills and diagnostic severities. A crafted *.net.json could run script when its topology.html was opened. All of them are now escaped; rendered examples regenerated. Reported by the Socket audit on skills.sh.

Regenerate existing diagrams with netlab render / netlab build to pick up the fixed viewer.

Full changelog: v1.1.0...v1.1.1

🤖 Generated with Claude Code