Jakub Zych 2740ab276c docs(19.1-02): add forum bluemonday policy note ...

- Pin the named forum policy on bluemonday v1.0.27 already in go.mod
- Separate it from seaglass UGC: PHP allow-list, http/https/mailto, nofollow and target blank
- D-17 owns Render/Purify; forum must not vendor goldmark or bluemonday

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-18 13:24:18 +02:00

..

2026-10-07-embedded-admin-release-gate.md

docs(planning): record embedded admin release gate

2026-10-07 10:39:22 +02:00

2026-10-11-framework-html-sanitizer-bluemonday.md

docs(17-01): decision note naming bluemonday v1.0.27 for the framework sanitizer

2026-10-12 15:09:52 +02:00

2026-10-12-admin-display-sanitizer-dompurify.md

docs(quick-261012-s3g): decision note naming DOMPurify and Vitest browser mode for the admin

2026-10-12 20:31:34 +02:00

2026-10-13-paymentgateway-hashids-go-hashids.md

docs(18-02): decision note for the go-hashids dependency

2026-10-13 12:10:41 +02:00

2026-10-15-cooler-go-redis-otter.md

docs(19.3): decide cooler dependencies

2026-10-15 17:27:33 +02:00

2026-10-15-release-v0-2-0.md

docs: decide to release the 19.3 gap closure as v0.2.0

2026-10-15 23:14:08 +02:00

2026-10-17-generic-mcp-module.md

docs: capture exploration — generic MCP module (phase 19.7, note, two prerequisite todos)

2026-10-17 20:31:25 +02:00

2026-10-18-bluemonday-forum-policy.md

docs(19.1-02): add forum bluemonday policy note

2026-10-18 13:24:18 +02:00

apparatus-dissolved-into-framework.md

docs: capture exploration — apparatus dissolved into framework

2026-09-28 00:39:43 +02:00

core-plugin-port-inventory.md

docs: capture exploration — core plugin port inventory, Horoskopia and Wavepath seeds

2026-10-07 20:10:28 +02:00

core-plugins-own-repos.md

docs: move golem15.user to sm-user-plugin and supersede the Phase 1 extraction deferral

2026-10-02 11:02:07 +02:00

go-vs-php-on-plytarium.md

docs: capture exploration — backend-deployment

2026-09-28 01:27:19 +02:00

journal-html-sanitizing-bluemonday.md

docs(16.2): record the editor-output policy extension

2026-10-10 12:11:30 +02:00

lagoon-per-query-collation.md

docs(quick-261001-ddh): record per-query collation decision superseding D-06

2026-10-01 09:53:57 +02:00

oauth2-wristband-direct-port.md

docs(08): create OAuth authorization server plans

2026-09-23 13:38:58 +02:00

plugin-layout-winter-directories.md

docs(05-01): confirm models-leaf rule against three more plugins

2026-09-18 18:37:26 +02:00

v1-target-plytarium.md

Initial commit: SummerCMS Go planning docs and research

2026-09-16 02:07:04 +02:00

wavepath-framework-asks-division.md

docs: capture exploration — wavepath framework asks as phases 19.2 to 19.6

2026-10-11 00:36:09 +02:00

why-go-not-scala.md

Initial commit: SummerCMS Go planning docs and research

2026-09-16 02:07:04 +02:00