Resolved in spikersoft-angular PR #149 (merged to master, 74dff52). Extended the this.destroyed guard to the three async callbacks in country-map.component.ts that touched the Leaflet map…
Root-caused and fixed in spikersoft-backend#179 (merged to master).
Root cause — not the fixture's worker IHost ordering or a lingering worker RabbitMQ channel. The unobserved exception is…
Reopened — the flake recurred on master ee927b8 (e2e-anonymous passed as task 8852, then failed on a later run of the same commit — the classic intermittent signature).
**Root cause…
Resolved in spikersoft-backend PR #178 (merged to master). Added a useClang arm (keyed off CodeExecutionMetadataHelper.IsClangLanguage, free-play only) to the free-play dispatch in…
Item 1 (EPUB sanitizer bypass) merged to master — spikersoft-angular PR #148. Uploaded EPUB HTML now sanitized through DOMPurify (EPUB-safe profile) before bypassSecurityTrustHtml; 6 unit…
Item 2 threat-model resolved (code analysis) — it's self-exec only, no stored/shared vector.
Audited the dev-tools-diagram feature for any path that could persist/import/share a full graph…
Item 1 (EPUB sanitizer bypass) implemented — spikersoft-angular PR #148 (open, for review).
Per the prescribed fix: uploaded EPUB HTML now goes through DOMPurify with an EPUB-safe profile…