#6229 Fix improper output rendering#6230

Merged

sosnovsky merged 25 commits into

issue-6229-fix-improper-output-rendering

Jun 1, 2026

Commits on May 22, 2026

fix: sanitize user-provided content with Xss.escape to prevent potential XSS vulnerabilities
martgil
committed
chore: add default-src to extension_pages content security policy
martgil
committed
chore: update manifest.json
martgil
committed
refactor: use build-specific csp
martgil
committed
refactor: move the connect-src patching to makeMockBuild
martgil
committed
test: fix failing test
martgil
committed

Commits on May 25, 2026

test: add style-src unsafe inline csp directive
martgil
committed
test: add another host to connect-src csp
martgil
committed
test: fix missing port on whitelisted domain
martgil
committed
test: update img-src
martgil
committed
feat: add flowcrypt s3 to connect-src
martgil
committed

Commits on May 26, 2026

feat: add google.com to connect-src
martgil
committed
test: add google.com to test csp
martgil
committed
Merge remote-tracking branch 'origin/master' into issue-6229-fix-improper-output-rendering
martgil
committed
test: add new host to connect-src
martgil
committed
test: add even more hosts
martgil
committed
test: add www.google.com to connect-src
martgil
committed
chore: de-duplicate hosts
martgil
committed
test: add whitelisted ports
martgil
committed
chore: prod-ready manifest.json
martgil
committed
chore: de-dupe hosts
martgil
committed

Commits on May 29, 2026

Commits on Jun 1, 2026

chore: revert changes
martgil
committed
fix: apply connect-src and style-src allowing inline
martgil
committed