mergeback latest, purge more changesets with 🔥 - #5514

Open

boutell wants to merge 20 commits into

mainfrom

GitHub Advanced Security / CodeQL failed Jul 10, 2026 in 1s

4 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

3 high
1 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 390 in packages/redirect/index.js

Code scanning / CodeQL

Incomplete string escaping or encoding High

This replaces only the first occurrence of '*'.

Check failure on line 118 in packages/seo/test/functional-tests.js

Code scanning / CodeQL

Incomplete URL substring sanitization High test

'

' can be anywhere in the URL, and arbitrary hosts may come before or after it.

Check failure on line 119 in packages/seo/test/functional-tests.js

Code scanning / CodeQL

Incomplete URL substring sanitization High test

'

' can be anywhere in the URL, and arbitrary hosts may come before or after it.

Check warning on line 487 in packages/sanitize-html/index.js

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.