COMMITS
September 11, 2026
A
fix: escape SQL table constraints in SVG
Alexander Wang committed
A
security: bound URL decoder expansion
Alexander Wang committed
A
Merge pull request #2901 from d2lang/security/local-resource-policy
Alexander Wang committed
A
tests: preserve trusted remote bundler fixtures
Alexander Wang committed
A
security: enforce local policy in watch mode
Alexander Wang committed
A
security: pin local roots and reject special files
Alexander Wang committed
A
security: require explicit local file access
Alexander Wang committed
A
Merge pull request #2900 from d2lang/security/board-output-containment
Alexander Wang committed
A
Merge pull request #2899 from d2lang/security/asset-network-policy
Alexander Wang committed
A
Merge pull request #2898 from d2lang/security/svg-bundler-content-type
Alexander Wang committed
A
Merge pull request #2897 from d2lang/security/lazy-plugin-discovery
Alexander Wang committed
A
Merge pull request #2896 from d2lang/security/reject-dangerous-links
Alexander Wang committed
A
Merge pull request #2895 from d2lang/security/svg-class-escaping
Alexander Wang committed
A
Merge pull request #2894 from d2lang/security/parser-depth-limit
Alexander Wang committed
A
parser: propagate import cancellation
Alexander Wang committed
A
d2cli: keep private-network help working
Alexander Wang committed
A
d2cli: make multiboard publication transactional
Alexander Wang committed
A
security: own public asset network dialing
Alexander Wang committed
A
plugins: reject ambiguous layout selection
Alexander Wang committed
A
plugins: preserve staged selection semantics
Alexander Wang committed
A
d2cli: contain multiboard output paths
Alexander Wang committed
A
security: restrict remote asset network access
Alexander Wang committed
A
plugins: execute only the selected external plugin
Alexander Wang committed
A
Reject dangerous ordinary link schemes
Alexander Wang committed
A
fix(svg): sanitize bundled image media types
Alexander Wang committed
A
parser: bound nesting and honor cancellation
Alexander Wang committed
A
fix(svg): escape custom class attributes
Alexander Wang committed
September 10, 2026
A
Merge pull request #2893 from d2lang/codex/grid-integral-measurements
Alexander Wang committed
A
Speed up exact integral grid row measurements
Alexander Wang committed
A
Merge pull request #2889 from d2lang/agent/tala-preserve-compound-routes
Alexander Wang committed