Repository navigation

#6229 Fix improper output rendering - #6230

Merged

sosnovsky merged 25 commits into

issue-6229-fix-improper-output-rendering

Jun 1, 2026

Commits on May 22, 2026

fix: sanitize user-provided content with Xss.escape to prevent potential XSS vulnerabilities
martgil
committed
99f19d5
chore: add default-src to extension_pages content security policy
martgil
committed
17c01ac
chore: update manifest.json
martgil
committed
9afde36
refactor: use build-specific csp
martgil
committed
49e58de
refactor: move the connect-src patching to makeMockBuild
martgil
committed
a767053
test: fix failing test
martgil
committed
b312de6

Commits on May 25, 2026

test: add style-src unsafe inline csp directive
martgil
committed
44de259
test: add another host to connect-src csp
martgil
committed
31b219b
test: fix missing port on whitelisted domain
martgil
committed
f019953
test: update img-src
martgil
committed
74c7181
feat: add flowcrypt s3 to connect-src
martgil
committed
5fd2d1a

Commits on May 26, 2026

feat: add google.com to connect-src
martgil
committed
95b06e2
test: add google.com to test csp
martgil
committed
21d7ab3
Merge remote-tracking branch 'origin/master' into issue-6229-fix-improper-output-rendering
martgil
committed
5a9b720
test: add new host to connect-src
martgil
committed
c1789d1
test: add even more hosts
martgil
committed
b42bf66
test: add www.google.com to connect-src
martgil
committed
81f3ea1
chore: de-duplicate hosts
martgil
committed
5080e27
test: add whitelisted ports
martgil
committed
fb64204
chore: prod-ready manifest.json
martgil
committed
71a094f
chore: de-dupe hosts
martgil
committed
f9c3116

Commits on May 29, 2026

Merge branch 'master' into issue-6229-fix-improper-output-rendering
martgil
authored
7bb90fa
chore: re-add google.com host
martgil
committed
e82bb73

Commits on Jun 1, 2026

chore: revert changes
martgil
committed
5096070
fix: apply connect-src and style-src allowing inline
martgil
committed
9ca4b7c