Thanks to visit codestin.com
Credit goes to github.com

fix: prevent markdown injection in notifications - #28340

Merged

BobbyHo merged 15 commits into

mainfrom

coder-plat-273-sec-93

Aug 25, 2026

Commits on Aug 20, 2026

fix(coderd): prevent markdown injection in notifications
BobbyHo
committed
9594a14
fix(coderd/render): escape leading emphasis and list markers
BobbyHo
committed
7844bce
test(coderd/render): fail on structure cases that assert nothing
BobbyHo
committed
6a9c44c

Commits on Aug 24, 2026

Merge branch 'main' into coder-plat-273-sec-93
BobbyHo
authored
f319632
Merge branch 'main' into coder-plat-273-sec-93
BobbyHo
authored
f49399b
Merge branch 'main' into coder-plat-273-sec-93
BobbyHo
authored
9802c7a
chore(scripts): exclude notification goldens from the emdash check
BobbyHo
committed
cf118ad
fix(coderd): close markdown escaping gaps in notifications
BobbyHo
committed
5a45371
docs(coderd/notifications): correct the escaping guarantee in notifier.prepare
BobbyHo
committed
6867339
fix(coderd/render): neutralize a fold construct on a value's first line
BobbyHo
committed
b42dcf7
docs(coderd): trim notification escaping comments to the non-obvious
BobbyHo
committed
a671d84
docs(coderd/render): record the destinations Safelink drops
BobbyHo
committed
a4df52f
fix(coderd): fold the Subject header on its encoded length
BobbyHo
committed
d391ac0

Commits on Aug 25, 2026