unstructured
fix: sanitize v2 HTML output to prevent stored XSS (GHSA-v5mq-3xhg-98m9)
#4394
Merged
Merged
fix: sanitize v2 HTML output to prevent stored XSS (GHSA-v5mq-3xhg-98m9) #4394
badGarnet
merged
9 commits into
main
from
yao/stored-xss-html-output
fix: sanitize v2 HTML output to prevent stored XSS (GHSA-v5mq-3xhg-98m9)
3cfd3d50
github-advanced-security
commented
on 2026-07-10
fix: harden v2 HTML sanitization
f4d11a1b
fix: filter inline HTML styles
0d2e3f7b
test: assert sanitized href attributes
6c06f583
github-advanced-security
commented
on 2026-07-10
Potential fix for pull request finding 'CodeQL / Incomplete URL subst…
e9c4f837
cubic-dev-ai
commented
on 2026-07-10
test: regenerate HTML fixtures for sanitized v2 output
842229ad
fix: address v2 HTML sanitization review comments
3bcfb917
test: drop stray HTML fixture with no tracked input
0334b450
fix: keep raw table text inside the table in v2 HTML output
73a7fecf
cubic-dev-ai
commented
on 2026-07-11
paulkarayan
approved these changes
on 2026-07-11
Reviewers
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Login to write a write a comment.
Login via GitHub