Skip to content

fix: sanitize input hints to prevent XSS - #2559

Merged
bajrangCoder merged 1 commit into
mainfrom
fix/find-file-palette-xss
Jul 31, 2026
Merged

bajrangCoder merged 1 commit into
mainfrom
fix/find-file-palette-xss

Conversation

@bajrangCoder

Copy link
Copy Markdown
Member

No description provided.

@greptile-apps

greptile-apps Bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Sanitizes input-hint HTML with DOMPurify before rendering it through innerHTML, preventing executable markup while retaining supported hint formatting.

Confidence Score: 5/5

The PR appears safe to merge, with input-hint markup now sanitized before HTML insertion.

DOMPurify is already available and used with the same import pattern in browser-rendered code, and its default sanitization preserves the ordinary structural and presentation markup used by existing hints while removing unsafe content.

Important Files Changed

Filename Overview
src/components/inputhints/index.js Adds the repository’s existing DOMPurify sanitization pattern at the input-hint HTML rendering boundary; no actionable regressions identified.

Reviews (1): Last reviewed commit: "fix: sanitize input hints to prevent XSS" | Re-trigger Greptile

@bajrangCoder
bajrangCoder added this pull request to the merge queue Jul 31, 2026
Merged via the queue into main with commit b097676 Jul 31, 2026
11 checks passed
@github-project-automation github-project-automation Bot moved this from Backlog to Done in The Code Board - Acode Jul 31, 2026
@bajrangCoder
bajrangCoder deleted the fix/find-file-palette-xss branch July 31, 2026 11:16
@devilhunter001

Copy link
Copy Markdown

👍👍👍

7HR4IZ3 pushed a commit to cyber-sight/Acode that referenced this pull request Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants