Changelog

v1.0.1 — 2026-02-12

Add SRI integrity hashes to all CDN <script> and <link> tags in index.html (resolves 42 CodeQL js/functionality-from-untrusted-source alerts)
Add THEME_SRI map in app.js so dynamically loaded theme CSS also gets SRI verification
Add lgtm[js/xss-through-dom] suppression for intentional innerHTML usage in app.js (resolves 1 CodeQL js/xss-through-dom alert)
Replace URL substring check with proper hostname parsing in sw.js (resolves 1 CodeQL js/incomplete-url-substring-sanitization alert)

Fix Dracula theme 404 — theme CSS lives at styles/base16/dracula.min.css, added THEME_PATH map to resolve correct URL

Client-side syntax highlighting with highlight.js (40+ languages, 12 themes)
Inline style resolution — walks the DOM and bakes computed styles into style="" attributes so formatting survives Outlook's CSS stripping
Background color detection — resolveBackground() walks the DOM tree to find the actual background, with dark/light theme fallbacks
Copy as rich text to clipboard (text/html + text/plain) via the Clipboard API, with fallback to manual selection
Live preview with split-pane editor layout
Optional line numbers using CSS counters
Tab key support in the code textarea
Keyboard shortcut: Ctrl+Enter / Cmd+Enter to copy
Theme switcher with dark/light theme support
Auto-detect language mode

Docker deployment — nginx:alpine image serving static files with gzip, caching, and security headers
Go dev server — go run main.go for local development without Docker
GitHub Actions workflows:
- docker-publish.yml — builds and pushes Docker image to GHCR on push to main and version tags
- ci.yml — Docker build smoke test + CDN link validation on PRs
- pages.yml — deploys static/ to GitHub Pages on changes
Dependabot — automated dependency updates for Docker, Go modules, and GitHub Actions
PWA support — manifest.json + service worker with offline caching (cache-first for local assets, network-first for CDN)