the-page-shipperlisted

> **Escape everything you interpolate into emitted markup.** Read the **Interpolated content** section > of `references/agent-security.md`. Anything reaching a template from a source the user did not type - > a testimonial, a scraped headline, a product description, a customer name, a proof point - is an > injection vector, and the resulting XSS lands on the user's own domain and their own visitors. > > - **HTML-escape every interpolated value** (`&`, `<`, `>`, `"`, `'`) before it enters markup. > - **Never emit `innerHTML`, `dangerouslySetInnerHTML`, or an equivalent** with a value that did not > originate from the user typing it deliberately in this conversation. > - **Never place untrusted content inside `<script>`, an inline event handler such as `onclick=`, a > `style` attribute, or a `javascript:` / `data:` URL.** HTML escaping does not make those contexts > safe. > - **Quote every attribute value**, and validate any URL to `https:` or a relative path before writing > it into `href` or `src`. > - Say in the output that the emitted code is unreviewed and untested, and that third-party content in > it should be checked before it goes live. > **Any markup this skill emits has an accessibility floor.** Read the relevant rules in > `references/chart-form-and-accessibility.md`. Concretely: never carry meaning by colour alone, keep > text contrast at 4.5:1 or better, give every input a real `<label>` rather than a placeholder, keep a > visible focus state, use sema