2 Commits

Include renames

Author	SHA1	Message	Date
杨慎	4ac70cceeb	feat(video-export): capture self-contained static interactive HTML (#1086) ... * feat(video-export): capture static interactive HTML * fix(video-export): harden interactive HTML capture diagnostics * fix(video-export): initialize runtime diagnostics in manifest * fix(video-export): close interactive capture review findings * fix(video-export): preserve packaged interactive resources * fix(video-export): address packaging review feedback * fix(video-export): harden interactive HTML packaging * fix(video-export): unify interactive asset packaging * fix(video-export): close remaining interactive packaging gaps	2026-08-11 22:16:58 +08:00
Sebastion	d89ef645e1	fix(renderer): remove allow-same-origin from interactive srcDoc iframe sandbox (#726) ... Combining allow-scripts with allow-same-origin on a srcDoc iframe negates the sandbox; since the embedded HTML can come from LLM output or imported data, the iframe now runs in a null origin. postMessage control (targetOrigin='*') is unaffected. Adds a regression test. Fixes #725.	2026-06-15 16:45:41 +08:00