Harden Power Pages shell and URL handling - #386

Merged

Priyanshu Agrawal (priyanshu92) merged 34 commits into

mainfrom

users/priyanshu92/fix-power-pages-shell-security

Aug 11, 2026

Commits on Aug 6, 2026

docs: secure Power Pages approvals

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
6434f49
Pin Power Pages Playwright MCP
Priyanshu Agrawal (priyanshu92)
committed
3abedfb
Harden Playwright MCP root resolution
Priyanshu Agrawal (priyanshu92)
committed
cef3b4f
Merge remote-tracking branch 'refs/remotes/origin/users/priyanshu92/readme-safety-guidance' into users/priyanshu92/fix-power-pages-mcp-root
Priyanshu Agrawal (priyanshu92)
committed
e1b328b
Harden export solution ZIP validation

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
fd3ae61
Harden Power Pages command and URL handling

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
5e58408
Merge PR 382 root hardening
Priyanshu Agrawal (priyanshu92)
committed
da858e2
address PR review feedback
Priyanshu Agrawal (priyanshu92)
committed
6136d27
address PR review feedback
Priyanshu Agrawal (priyanshu92)
committed
928bd48
address PR review feedback
Priyanshu Agrawal (priyanshu92)
committed
9294cd7
Accept case-insensitive HTTPS schemes
Priyanshu Agrawal (priyanshu92)
committed
566c2d0
Close remaining Power Pages shell sinks
Priyanshu Agrawal (priyanshu92)
committed
0a0e8e7
Make shell regression harness portable
Priyanshu Agrawal (priyanshu92)
committed
83e730f
Canonicalize detected host URLs
Priyanshu Agrawal (priyanshu92)
committed
c09f2a0
Merge PR #385 ZIP validation
Priyanshu Agrawal (priyanshu92)
committed
34660d1
address PR review feedback
Priyanshu Agrawal (priyanshu92)
committed
95c07be
Trigger stacked PR checks
Priyanshu Agrawal (priyanshu92)
committed
a8a13d4
Run stacked PR checks
Priyanshu Agrawal (priyanshu92)
committed
1f08be1
Align integration request transport
Priyanshu Agrawal (priyanshu92)
committed
af93501
Run final stacked PR checks
Priyanshu Agrawal (priyanshu92)
committed
b8bac6b
Separate integration header contract tests

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
25bb930
Merge PR 383 into safe ZIP validation

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
953c055
Merge updated safe ZIP validation layer

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
04954fe

Commits on Aug 11, 2026

address PR review feedback

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
2ddd2c9
Merge PR 382 root hardening updates

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
0bb7b7d
address PR review feedback

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
437333e
Merge final PR 382 containment fix

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
fa5f35c
Merge final PR 383 tip into safe ZIP validation

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
04ca651
Merge final safe ZIP validation layer

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
48afdd2
Merge commit '362eb38dfea65fef4dfa026f8cacb19ad77fe3af' into users/priyanshu92/readme-safety-guidance
Priyanshu Agrawal (priyanshu92)
committed
adc3c22
Merge commit 'adc3c2294ee05dcdedbe439ee52be305ae1269ab' into users/priyanshu92/fix-power-pages-mcp-root
Priyanshu Agrawal (priyanshu92)
committed
614e962
Merge updated PR 382 base

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
fd5fd58
Merge latest PR 383 tip into safe ZIP validation

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
156559b
Merge latest safe ZIP validation layer

Priyanshu Agrawal (priyanshu92)
and
Copilot
committed
27c9c61

Navigation Menu

Uh oh!

Harden Power Pages shell and URL handling - #386

Harden Power Pages shell and URL handling#386
Priyanshu Agrawal (priyanshu92) merged 34 commits into
mainfrom
users/priyanshu92/fix-power-pages-shell-security

Commits on Aug 6, 2026

docs: secure Power Pages approvals

Pin Power Pages Playwright MCP

Harden Playwright MCP root resolution

Merge remote-tracking branch 'refs/remotes/origin/users/priyanshu92/readme-safety-guidance' into users/priyanshu92/fix-power-pages-mcp-root

Harden export solution ZIP validation

Harden Power Pages command and URL handling

Merge PR 382 root hardening

address PR review feedback

address PR review feedback

address PR review feedback

Accept case-insensitive HTTPS schemes

Close remaining Power Pages shell sinks

Make shell regression harness portable

Canonicalize detected host URLs

Merge PR #385 ZIP validation

address PR review feedback

Trigger stacked PR checks

Run stacked PR checks

Align integration request transport

Run final stacked PR checks

Separate integration header contract tests

Merge PR 383 into safe ZIP validation

Merge updated safe ZIP validation layer

Commits on Aug 11, 2026

address PR review feedback

Merge PR 382 root hardening updates

address PR review feedback

Merge final PR 382 containment fix

Merge final PR 383 tip into safe ZIP validation

Merge final safe ZIP validation layer

Merge commit '362eb38dfea65fef4dfa026f8cacb19ad77fe3af' into users/priyanshu92/readme-safety-guidance

Merge commit 'adc3c2294ee05dcdedbe439ee52be305ae1269ab' into users/priyanshu92/fix-power-pages-mcp-root

Merge updated PR 382 base

Merge latest PR 383 tip into safe ZIP validation

Merge latest safe ZIP validation layer