Fuaran.UI.Renderer
Fuaran renderer – Fable + React + Feliz. Every string-to-DOM seam carries a declared sanitisation posture (SANITIZATION.md states it seam by seam): an allowlisted URL-scheme floor on href/src that also rejects the protocol-relative spellings, a positive character gate on extra-attribute names, and a raw-HTML floor over rendered markdown. Interactive dispatch fails closed – a shipped runtime denies until the host grants, and the permissive posture is reached by name. Apache-2.0 licensed.
Activity
- Latest release
- 4d ago
- Total releases
- 27
- Cadence
- ~daily
- Last 12 months
- 27
Details
- License
- Apache-2.0
- First release
- Jul 24, 2026
Releases