mirror of
https://github.com/4gray/iptvnator.git
synced 2026-10-10 01:56:16 -08:00
Addresses Copilot's suppressed review comments: - The m3u-url candidate card no longer shows a get.php password in clear — the display masks the query value while the untouched URL still prefills the form. - A picked candidate is dropped if the user switches to another method before its target form mounts, so it cannot lie in wait and prefill a later visit. - The parser contract now names its one assembled-value exception (labeledHostUrl completing a scheme-less host with http:// and a labeled port). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JE1De2dfyRZMYh4H2iGXb4