claude-bot c580a50fd4 installer: escape agreement tab labels (XSS hardening) ...

RP installer already escapes k.tab; main installer was injecting it raw.
Add escapeHtml helper and apply to tab id/label so admin-supplied
agreement labels can't break the HTML.

2026-05-20 10:29:06 +09:00

39 KiB

Raw Blame History

View Raw