fix(security): sanitize option classNames against attribute injection - #471

Closed

gnbm wants to merge 3 commits into

security/sanitize-classnames

Commits on Jun 3, 2026

fix(security): escape customData fields in option aria-label (S2)
gnbm
committed
fix(security): sanitize option classNames against attribute injection (S3)
gnbm
committed

Commits on Jun 8, 2026

perf: throttle global resize handler + guard instance-less wrappers (#472)

gnbm
and
Copilot
authored