Skip to content

Prevent XSS via unsafe href protocols in WebFetchToolCall#3403

Merged
ThomasK33 merged 2 commits into
mainfrom
claude/autopatch-scan-18aa40f9-vuln-1275269-visAU
May 28, 2026
Merged

Prevent XSS via unsafe href protocols in WebFetchToolCall#3403
ThomasK33 merged 2 commits into
mainfrom
claude/autopatch-scan-18aa40f9-vuln-1275269-visAU

fix: broaden isSafeHref comment to reflect full scope of blocked schemes

62ae660
Select commit
Loading
Failed to load commit list.
Codecov / codecov/patch succeeded May 27, 2026 in 0s

0.00% of diff hit (target 64.06%)

View this Pull Request on Codecov

0.00% of diff hit (target 64.06%)

View more details on Codecov