Skip to content

fix: CodeQL CDN SRI, HTML escaping, and ReDoS - #76

Merged
veillette merged 1 commit into
mainfrom
fix/codeql-security
Aug 12, 2026
Merged

fix: CodeQL CDN SRI, HTML escaping, and ReDoS#76
veillette merged 1 commit into
mainfrom
fix/codeql-security

Conversation

@veillette

Copy link
Copy Markdown
Contributor

Summary

  • Add Subresource Integrity on CodeMirror CDN scripts
  • Escape error.name in the dev overlay
  • Bound firmware version regex digit repeats (js/polynomial-redos)

Test plan

  • Playground loads CodeMirror; parseFirmwareVersion still parses normal versions
  • CodeQL alerts close after merge

Made with Cursor

Co-authored-by: Cursor <cursoragent@cursor.com>
@cursor

cursor Bot commented Aug 12, 2026

Copy link
Copy Markdown

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@veillette
veillette merged commit a5e8798 into main Aug 12, 2026
6 of 7 checks passed
@veillette
veillette deleted the fix/codeql-security branch August 12, 2026 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant