mirror of
https://github.com/block/goose.git
synced 2026-07-17 12:56:20 +02:00
c4e11a52df
Add security validation to prevent malicious or invalid hex colors from being applied when loaded from localStorage. Security improvements: - Validate custom color in ThemeSelector before setting to state - Validate custom color in index.html before applying theme - Prevent potential XSS vulnerabilities from malicious localStorage content Code quality improvements: - Add explanatory comments for HSL to RGB conversion magic numbers - Improve code clarity with inline documentation Addresses feedback from code review regarding input validation and security best practices. Signed-off-by: jom-sq <148157197+jom-sq@users.noreply.github.com>