This repository was archived by the owner on Aug 6, 2026. It is now read-only.

fix(security): validate URL scheme before shell.openExternal (MCP-app sandbox escape) - #3416

Merged

tatoalo merged 3 commits into

PostHog:mainfrom

zachdotai:fix/validate-external-url-scheme

Jul 15, 2026

Commits on Jul 15, 2026

fix(security): validate URL scheme before shell.openExternal (MCP-app sandbox escape)
zachdotai
committed
b9b230b
zach/chore: review feedback
zachdotai
committed
b6a9f99
Merge branch 'main' into fix/validate-external-url-scheme
tatoalo
authored
1d75af0