tmk241/hemx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test(examples): forbid authored browser javascript

Browse Source 
req: examples/005
This commit is contained in:
slhx agent
2026-05-11 08:11:06 +02:00
parent 816552e735
commit 0de4c82a16
2 changed files with 73 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
REQUIREMENTS.md
+3
View File
@@ -711,6 +711,9 @@ what a valid business email is.
### req: examples/004
004 Canonical examples are compile-tested golden API contracts. Changing generated API shape requires updating the examples deliberately.
### req: examples/005
005 Canonical examples must not contain user-authored browser JavaScript. They may load the shared slhx runtime (`/slhx.js`) and may use declarative `data-slhx-*` attributes; inline `<script>`, `on*=` event handlers, and `javascript:` URLs are forbidden outside opaque leaf-widget examples.
---
## milestone