Skip to content

Conversation

@SheetMetalConnect
Copy link
Owner

No description provided.

Add URL sanitization utilities to prevent XSS attacks via javascript:
protocol URLs. Apply sanitization to all database-sourced URLs before
use in href attributes and window.open() calls.

- Add sanitizeUrl() and safeOpenUrl() utilities in lib/utils.ts
- Fix IntegrationDetailModal.tsx URL handling
- Fix IntegrationsMarketplace.tsx URL handling
- Fix PDFViewer.tsx URL handling
@SheetMetalConnect SheetMetalConnect merged commit da26963 into main Jan 10, 2026
1 of 2 checks passed
@SheetMetalConnect SheetMetalConnect deleted the claude/fix-react-xss-vulnerability-NX588 branch January 18, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants