Branch: refs/heads/security-review-depth-and-devguide-practices Home: https://github.com/xwiki/xwiki-dev-llm Commit: 9ab3bf1547e0366ab035882c6c6a1bebc8a8bf01 https://github.com/xwiki/xwiki-dev-llm/commit/9ab3bf1547e0366ab035882c6c6a1b... Author: Vincent Massol <[email protected]> Date: 2026-09-27 (Sun, 27 Sep 2026) Changed paths: M README.md M xwiki/okf/conventions/security.md M xwiki/okf/index.md M xwiki/skills/xwiki-review/SKILL.md Log Message: ----------- [Misc] Add the new Security DevGuide practices to the OKF, and offer a full security depth in xwiki-review * okf/conventions/security.md: escaping per output context, the HTML macro's cleaning not being escaping, the XML Module parsing helpers, passing the entity to hasAccess, Programming Right being main-wiki only, saving as author from a script service, displaying an XObject property rather than parsing its raw value (from https://forum.xwiki.org/t/18884, now in the Security Developer Guide) * xwiki-review: ask for a quick or full security depth when xwiki-security-review is available; full delegates to it and keeps its output out of the comment Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications