Sync src/ to 86e2b67 (viewer XSS fix + judge hardening)

87677df

verified

davanstrien HF Staff commited on 28 days ago