Skip to content

[upstream-sync] Merge block/buzz through d8281b9c9 (31 commits, desktop 0.5.14) - #29

Merged
adrienlacombe merged 34 commits into
mainfrom
upstream-sync-20260816
Aug 16, 2026
Merged

[upstream-sync] Merge block/buzz through d8281b9c9 (31 commits, desktop 0.5.14)#29
adrienlacombe merged 34 commits into
mainfrom
upstream-sync-20260816

docs(agents): triage the 6 CodeQL alerts this sync introduced

92ad95c
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Aug 16, 2026 in 2s

6 new alerts including 6 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 6 high

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 245 in desktop/src/features/messages/ui/useComposerLinkPreviews.test.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://relay.example.com/media/x
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.

Check failure on line 374 in desktop/src/features/messages/ui/useComposerLinkPreviews.test.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://relay.example.com/media/fresh-after-absence
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.

Check failure on line 541 in desktop/src/features/messages/ui/useComposerLinkPreviews.test.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://relay.example.com/media/FRESH
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.

Check failure on line 545 in desktop/src/features/messages/ui/useComposerLinkPreviews.test.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://relay.example.com/media/STALE
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.

Check failure on line 562 in desktop/src/features/messages/ui/useComposerLinkPreviews.test.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://relay.example.com/media/FRESH
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.

Check failure on line 563 in desktop/src/features/messages/ui/useComposerLinkPreviews.test.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://relay.example.com/media/STALE
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.