Samuel Painter ee462dd70d fix(coding-agent): sanitize markdown links in exported session HTML (#3532) ...

marked v15 does not filter dangerous URL protocols. The default link
renderer passes href values through verbatim, so markdown like
`[click](javascript:alert(1))` renders as a clickable XSS link in
shared/exported session HTML.

Add custom link and image renderers that:
- Block javascript:, vbscript:, and data: protocol URLs
- Escape href/title/alt attributes via escapeHtml()

Also escape img.mimeType in session image rendering to prevent
attribute breakout from crafted session JSONL.

Fixes #3531

ee462dd70d · 2026-04-22 10:53:03 +02:00

History

..

bun

fix(coding-agent): suppress process warnings in CLI closes #2404

2026-03-19 22:21:48 +01:00

cli

feat(ai): add Fireworks provider support closes #3519

2026-04-22 01:09:11 +02:00

core

fix(coding-agent): sanitize markdown links in exported session HTML (#3532)

2026-04-22 10:53:03 +02:00

modes

fix(coding-agent): configure inline tool image width

2026-04-22 00:56:01 +02:00

utils

fix(coding-agent): resolve shell config from session settings

2026-04-20 22:32:11 +02:00

cli.ts

feat(coding-agent): set PI_CODING_AGENT=true env var at startup

2026-04-09 03:03:19 +02:00

config.ts

fix(coding-agent): detect Windows pnpm global installs closes #3378

2026-04-20 15:59:57 +02:00

index.ts

feat: Expose BuildSystemPromptOptions on before-agent-start event. (#3473)

2026-04-20 23:06:47 +02:00

main.ts

fix(coding-agent): use tool-name allowlists and remove cwd-bound singletons

2026-04-20 22:05:28 +02:00

migrations.ts

fix(coding-agent): remove process-cwd tool singletons and use tool-name allowlists

2026-04-20 22:05:28 +02:00

package-manager-cli.ts

refactor(coding-agent): replace AgentSessionRuntimeHost with closure-based AgentSessionRuntime

2026-04-03 20:14:12 +02:00