27e27b2c53090276a82fa8a4a8ae89f8db288263
braney
  Tue Sep 29 14:13:18 2026 -0700
docent rm38198 release-ab proof line, and registry rows for #38428 and #38430, refs #38198, #38428, #38430, #38252

rm38198's container reopen section fails on hgwbeta (v504, which lacks
dba11b63364) and passes on genome-test.  htmlSanitizeTest goes red when the svg
allowlist of 7a356d85dba is backed out by hand, so #38428 gets a sandbox-ab row.
#38430 gets a page row with no test yet.  Both changes sit behind the
hubHtmlSanitize gate.

diff --git src/utils/testRegistry/registry.tsv src/utils/testRegistry/registry.tsv
index 20d1832152d..9a88f62ebee 100644
--- src/utils/testRegistry/registry.tsv
+++ src/utils/testRegistry/registry.tsv
@@ -130,16 +130,18 @@
 38320	504	lib/tests/faSpeedReadTest.c	-	invisible	unrecorded	the buffer grower and its caller must agree on the size
 38323	504	-	-	library	-	needs one: an api key made on one geo mirror has to work on all of them. BLOCKED: needs hubSpaceKeys rows in hgcentral, which means a test that writes
 38328	504	hg/lib/tests/genarkLiftOverTester.c	-	invisible	sandbox-ab	the accession list is escaped where the values are, and a non-accession never reaches the query
 38335	504	lib/tests/cgiParseTest.c	rm38335.docent.yaml	invisible	unrecorded	a pair with no =value must not lose the variable
 38339	504	-	-	page	-	the wording when CILogon returns an unverified email. The fix is in hg/hgLogin, so what changed is what a page says or does
 38340	504	hg/hgSession/tests/backupParseTest.c	-	invisible	unrecorded	the same pair, read back out of a session backup
 38340	504	lib/tests/cgiCookieTest.c	-	invisible	unrecorded	the same pair in a cookie header
 38356	504	-	-	page	-	the hgTablesTest robot finishing a run instead of aborting. The fix is in hg/hgTablesTest, so what changed is what a page says or does
 38359	-	lib/tests/netSlurpMaxTest.c	-	invisible	sandbox-ab	a response past the ceiling is refused and the buffer freed, instead of the run dying inside carefulAlloc with nothing in the log. Nothing reaches a page: the only caller is the hgTablesTest robot. Release is "-" because the fix is held for after the v504 branch cut and the ticket has no target version yet
 38364	504	-	rm38364.docent.yaml	page	-	a density mode that keeps items clickable. The fix is in hg/hgTracks, so what changed is what a page says or does
 38372	504	-	-	page	-	changing genome on hgCustom re-submitting the form. The fix is in hg/hgCustom, so what changed is what a page says or does
 38384	504	-	-	page	-	a 400 fetching faceted composite metadata on a curated hub. The fix is in hg/hgTrackUi, so what changed is what a page says or does
 38387	505	-	-	page	-	three-letter assembly names (hs1, rn7, dm6) found by the search box in a release image. The fix is in src/product/installer/browserSetup.sh (ft_min_word_len=3), so only a released docker image or a fresh mirror can show it; hgwdev has always run 3
 38398	505	-	rm38398.docent.yaml	page	-	the Hub Upload file card keeping the genome and hub name a hub.txt names. The fix is in hg/js, so what changed is what a page says or does
 38414	505	hg/lib/tests/trackHubSkipHubNameTester.c	-	invisible	sandbox-ab	a hub_ name with no second underscore comes back whole, not as a pointer one past NULL
+38428	505	lib/tests/htmlSanitizeTest.c	-	library	sandbox-ab	simple svg drawings (svg, g and the shapes, with their size, position, fill and stroke) survive the sanitizer, and the non-drawing parts (defs, script, event attributes) do not. Backed out by hand on 2026-09-29: every svg case comes out empty. Behind the hubHtmlSanitize gate, off on every server on 2026-09-29
+38430	505	-	-	page	-	hgGateway passing a hub assembly's description page through the sanitizer like the other hub pages. The fix is in hg/hgGateway, so what changed is what a page says or does. Behind the hubHtmlSanitize gate, off on every server on 2026-09-29
 38442	505	hg/lib/tests/cartPcrVarTester.c	rm38442.docent.yaml	library	sandbox-ab	hgPcrResult_imgOrd, the PCR track's place after a drag, survives a cart load while a result that is not two trash files is still dropped