Announcement Bar
Shows a dismissible announcement on discussion pages. First-party sample demonstrating the Convoro extension system (provider + migration + permission + frontend slot).
Shows a dismissible announcement on discussion pages. First-party sample demonstrating the Convoro extension system (provider + migration + permission + frontend slot).
AI security review
✓
Reviewed safe · 96/100
A clean, well-scoped sample announcement extension. Public route exposes only announcement text, admin CRUD is gated by auth+admin middleware, uses parameterized query builder, and output is escaped on both forum and admin surfaces.
- low · Forum banner uses textContent (safe) — In assets/forum.js the announcement body is rendered via textContent and the admin page escapes via esc(); no HTML injection vector. Noted only as the body is admin-controlled, so impact would be limited regardless.
Automated review of v1.0.0 by claude-opus-4-8 1 week ago. This is an automated signal to aid your judgment — not a guarantee.