daybook/issues
peter 532b4bd4eb Document #009's substring-check limitation; fix #011's CDN docs and theme typo
#009: html_fragment's content-shape check is substring-based, so it can
false-positive on inert text inside <script>/<pre> (e.g. a JS string
literal that happens to contain "<html>"). Documented as a known
limitation in docs/api.md rather than implementing real HTML parsing - a
proper fix is a much bigger change than the narrow trigger justifies, and
substring matching is the same approach the client helper already uses.

#011: added a curated CDN Snippets section to SKILL.md for html_full
(Tailwind, Chart.js, with an offline/air-gapped caveat), scoped explicitly
to that kind only. Fixed daybook_post.py's --theme help text, which named
a non-existent "bootstrap" theme (written ahead of a vendored-Bootstrap
feature that was planned but never built, not a typo).

Also updated SKILL.md's kind cheat sheet, which never mentioned the
json/csv kinds and still pointed at the old --as-markdown workaround for
them - and filed issue #012 for a real gap that surfaced doing so: the
posting script itself doesn't support --kind json/csv yet, only the raw API
does.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-02 15:32:22 +01:00
..
001-csrf-behind-reverse-proxy.md Close out issue 001: document CSRF/reverse-proxy requirement 2026-09-02 12:28:41 +01:00
002-env-example-not-actually-loaded.md Fix issues #002-#006 found by the LLM test harness 2026-09-02 13:38:59 +01:00
003-model-max-length-silently-unenforced.md Fix issues #002-#006 found by the LLM test harness 2026-09-02 13:38:59 +01:00
004-html-fragment-content-not-validated-server-side.md Fix issues #002-#006 found by the LLM test harness 2026-09-02 13:38:59 +01:00
005-patch-silently-mishandles-invalid-input.md Fix issues #002-#006 found by the LLM test harness 2026-09-02 13:38:59 +01:00
006-failed-post-still-evicts-artifacts.md Fix issues #002-#006 found by the LLM test harness 2026-09-02 13:38:59 +01:00
007-handover-to-llm-test-2026-09-02.md Add handover doc summarizing issues #002-#006 fixes for the LLM test project 2026-09-02 13:56:43 +01:00
008-source-fields-untyped-and-mangled.md Reject non-string source_name/source_id/source_prompt (issue #008) 2026-09-02 15:27:07 +01:00
009-content-shape-check-false-positive-in-script-strings.md Document #009's substring-check limitation; fix #011's CDN docs and theme typo 2026-09-02 15:32:22 +01:00
010-concurrent-posts-race-past-quota.md Fix concurrent posts racing past quota (issue #010) 2026-09-02 15:22:37 +01:00
011-vetted-cdn-snippets-for-html-full.md Document #009's substring-check limitation; fix #011's CDN docs and theme typo 2026-09-02 15:32:22 +01:00
012-posting-script-missing-json-csv-support.md Document #009's substring-check limitation; fix #011's CDN docs and theme typo 2026-09-02 15:32:22 +01:00
README.md Close out issue 001: document CSRF/reverse-proxy requirement 2026-09-02 12:28:41 +01:00

Issues

One file per issue: NNN-short-slug.md, numbered sequentially. Each file has a title, status (Open / Fixed / By design), description, and resolution once closed.