npub1q9geyrch3feyczz242sxjaa05yczv50dlpug082sjln2kl0wrnxst0nrfa/bitflash/scripts/build-pool-index.py, branch main [no description] https://upleb.uk/npub1q9geyrch3feyczz242sxjaa05yczv50dlpug082sjln2kl0wrnxst0nrfa/bitflash/atom?h=main 2026-08-07T20:21:08+00:00 pool: publish round proof ledger 2026-08-07T20:21:08+00:00 Nsable-sh nsable-sh@noreply.git.bitflash.network 2026-08-07T20:14:36+00:00 urn:sha1:b1eb8b66b8d7b47c7fb2e85d5d4db86a11823366 tools: reject non-http(s) dashboard URLs in the pool directory 2026-08-07T18:07:56+00:00 Bitflash admin@bitflash.network 2026-08-07T18:07:56+00:00 urn:sha1:78cf0c3cb6752bd36bbc8fe7017d5d60cca13da7 A pool's dashboard URL comes from its self-published status file. Escaping it for HTML is not enough: a javascript: or data: scheme would still render as a clickable script-injection on the public directory page. Only emit a link for http(s) schemes; anything else shows as no link. tools: build a static pool directory 2026-08-07T18:06:36+00:00 Nsable-sh nsable-sh@noreply.git.bitflash.network 2026-08-07T14:42:30+00:00 urn:sha1:a0355492c3bae37ad57ef3e05302a3e5b1a80e3e