mirror of
https://github.com/storytold/wordcraft.git
synced 2026-11-10 04:09:53 -06:00
A DOCX altChunk's own dropped pictures are merged into the parent through MissingPictures::push, named "<chunk part> > <story>". The strict report's human lines go through escape_peer, and the JSON line escapes C1, line separator and bidi characters (serde leaves them raw), so a crafted picture target can't forge or spoof a terminal line. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FypgCX8G9hbs6XYZFsgjbL