Fixed
- CodeQL #108 -- Bad HTML filtering regexp (
security.ts): Changed closing script tag regex to match all browser-accepted variants including</script foo="bar">and tags with tabs/newlines.
Full test suite: 2,357 tests across 25 suites, all passing.