Junirezz · mrmoney10010-design · Jun 27, 2026
diff --git a/frontend/src/lib/security.ts b/frontend/src/lib/security.ts
@@ -71,9 +71,14 @@ export function getStellarExplorerUrl(
  * Note: This is rarely needed in React since JSX auto-escapes
  */
 export function escapeHtml(text: string): string {
-  const div = document.createElement('div');
-  div.textContent = text;
-  return div.innerHTML;
+  // Simple HTML escaping without relying on DOM APIs.
+  // Replaces &, <, >, ", and ' with their HTML entity equivalents.
+  return text
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
 }
 
 /**

diff --git a/frontend/src/lib/transactionConfirmationBuilder.ts b/frontend/src/lib/transactionConfirmationBuilder.ts
@@ -49,7 +49,7 @@ export function buildTransactionSummary(
 
   // Detect unusual values
   const isUnusualAmount = amount >= UNUSUAL_AMOUNT_THRESHOLD;
-  const isUnusualFee = feeXlm >= STELLAR_BASE_FEE_XLM * UNUSUAL_FEE_MULTIPLIER;
+  const isUnusualFee = feeXlm > STELLAR_BASE_FEE_XLM * UNUSUAL_FEE_MULTIPLIER;
   const isUnknownContract = contractName === null;
 
   return {

diff --git a/node_modules/.bin/esbuild b/node_modules/.bin/esbuild
diff --git a/node_modules/.bin/husky b/node_modules/.bin/husky
diff --git a/node_modules/.bin/nanoid b/node_modules/.bin/nanoid
diff --git a/node_modules/.bin/rolldown b/node_modules/.bin/rolldown
diff --git a/node_modules/.bin/specificity b/node_modules/.bin/specificity
diff --git a/node_modules/.bin/tldts b/node_modules/.bin/tldts
diff --git a/node_modules/.bin/tsx b/node_modules/.bin/tsx
diff --git a/node_modules/.bin/vite b/node_modules/.bin/vite
diff --git a/node_modules/.bin/vitest b/node_modules/.bin/vitest
diff --git a/node_modules/.bin/why-is-node-running b/node_modules/.bin/why-is-node-running