Webview XSS hardening: HTML/attribute escaping for untrusted sinks, URL scheme guard, safe code-block restore, regression test suites - #224

Open

leonidasbarkas98-cpu wants to merge 22 commits into

andrepimenta:mainfrom

leonidasbarkas98-cpu:fix/webview-xss-hardening

Commits on Jul 28, 2026

fix: escape MCP server config display (fork-issue-39, escaping slice only)

Jonas Kunert
and
claude
committed
5c29e66
fix: escape raw HTML in chat messages so tags cannot corrupt the view (fork-issue-40)

Jonas Kunert
and
claude
committed
296b032
fix: escape user message previews in the history list (fork-issue-40)

Jonas Kunert
and
claude
committed
019d1a3
feat: collapse long code blocks and add per-message fold control (fork-issue-48)

Jonas Kunert
and
claude
committed
b9594d0
fix: escape tool input, command patterns and picker entries in the webview (fork-issue-49)

Jonas Kunert
and
claude
committed
8b177cd
fix: consolidate duplicate enableYoloMode declarations (fork-issue-52)

Jonas Kunert
and
claude
committed
facf5bd
fix: pass permission entries to Remove via dataset instead of inline onclick (fork-issue-58)

Jonas Kunert
and
claude
committed
30806ae
fix: escape webview attribute and inline-handler sinks (fork-issue-57)

Jonas Kunert
and
claude
committed
5fb446a
fix: never report YOLO mode as enabled unless it was persisted (fork-issue-59)

Jonas Kunert
and
claude
committed
e2b7f2a
fix: keep the MCP server name out of inline handlers (fork-issue-60)

Jonas Kunert
and
claude
committed
0aea610
fix: escape third-party data and guard URL schemes in the webview (fork-issue-61)

Jonas Kunert
and
claude
committed
4ae5c2a
fix: stop double-decoding copied code blocks, drop dead helper (fork-issue-62)

Jonas Kunert
and
claude
committed
b9c5b3f
fix: dollar-sequence-safe code block restore in parseSimpleMarkdown (fork-issue-55)

Jonas Kunert
and
claude
committed
521d539
feat: show your own messages as raw text, keep code blocks (fork-issue-63)

Jonas Kunert
and
claude
committed
831e608
test: extract webview functions with the TypeScript parser (fork-issue-64)

Jonas Kunert
and
claude
committed
6e653ad
test: full-pipeline dollar-sequence PoC for restoreCodeBlockPlaceholders (fork-issue-70)

Jonas Kunert
and
claude
committed
d3f90df
chore: translate internal review comments and fix per-key settings batch handling
Jonas Kunert
committed
f034ee4
chore: qualify remaining internal issue references in code comments
Jonas Kunert
committed
989266c
chore: add missing test:settings-batch npm script
Jonas Kunert
committed
5cd92b5
chore: fix cross-branch comment references and drop dead review markers

Jonas Kunert
and
claude
committed
57e812f
chore: drop remaining cross-branch/process-jargon comment references

Jonas Kunert
and
claude
committed
a6aa2cd

Commits on Jul 29, 2026

chore: fix stale line-number references in comments (review follow-up)

Jonas Kunert
and
claude
committed
2fe4259

Navigation Menu

Uh oh!

Webview XSS hardening: HTML/attribute escaping for untrusted sinks, URL scheme guard, safe code-block restore, regression test suites - #224

Webview XSS hardening: HTML/attribute escaping for untrusted sinks, URL scheme guard, safe code-block restore, regression test suites#224
leonidasbarkas98-cpu wants to merge 22 commits into
andrepimenta:mainfrom
leonidasbarkas98-cpu:fix/webview-xss-hardening

Commits on Jul 28, 2026

fix: escape MCP server config display (fork-issue-39, escaping slice only)

fix: escape raw HTML in chat messages so tags cannot corrupt the view (fork-issue-40)

fix: escape user message previews in the history list (fork-issue-40)

feat: collapse long code blocks and add per-message fold control (fork-issue-48)

fix: escape tool input, command patterns and picker entries in the webview (fork-issue-49)

fix: consolidate duplicate enableYoloMode declarations (fork-issue-52)

fix: pass permission entries to Remove via dataset instead of inline onclick (fork-issue-58)

fix: escape webview attribute and inline-handler sinks (fork-issue-57)

fix: never report YOLO mode as enabled unless it was persisted (fork-issue-59)

fix: keep the MCP server name out of inline handlers (fork-issue-60)

fix: escape third-party data and guard URL schemes in the webview (fork-issue-61)

fix: stop double-decoding copied code blocks, drop dead helper (fork-issue-62)

fix: dollar-sequence-safe code block restore in parseSimpleMarkdown (fork-issue-55)

feat: show your own messages as raw text, keep code blocks (fork-issue-63)

test: extract webview functions with the TypeScript parser (fork-issue-64)

test: full-pipeline dollar-sequence PoC for restoreCodeBlockPlaceholders (fork-issue-70)

chore: translate internal review comments and fix per-key settings batch handling

chore: qualify remaining internal issue references in code comments

chore: add missing test:settings-batch npm script

chore: fix cross-branch comment references and drop dead review markers

chore: drop remaining cross-branch/process-jargon comment references

Commits on Jul 29, 2026

chore: fix stale line-number references in comments (review follow-up)