Upload folder using huggingface_hub

index.html

@@ -887,7 +887,18 @@ function renderCoverageTable(taskKey, tableId, seen) {
         const td = el("td");
         const hit = seen[`${taskKey}|${v}|${sz}|${p.key}`];
         if (hit) {
-          td.innerHTML = `<a class="cell cell-val" href="${hit.s.url}" target="_blank" rel="noopener" title="Open validation session ${hit.s.session_id} on EdgeFirst Studio">✓</a>`;
+          // Build via DOM APIs with scheme validation — snapshot data is
+          // trusted at build time, but this page is public; stay defensive.
+          const a = el("a", { class: "cell cell-val", target: "_blank", rel: "noopener" });
+          let safeUrl = "#";
+          try {
+            const u = new URL(hit.s.url);
+            if (u.protocol === "https:" || u.protocol === "http:") safeUrl = u.href;
+          } catch (e) { /* keep '#' */ }
+          a.href = safeUrl;
+          a.setAttribute("title", `Open validation session ${hit.s.session_id} on EdgeFirst Studio`);
+          a.textContent = "✓";
+          td.appendChild(a);
         } else {
           td.innerHTML = '<span class="cell cell-none">—</span>';
         }