Skip to content

fix: sanitize input hints to prevent XSS - #2559

Merged
bajrangCoder merged 1 commit into
mainfrom
fix/find-file-palette-xss
Jul 31, 2026
Merged

fix: sanitize input hints to prevent XSS#2559
bajrangCoder merged 1 commit into
mainfrom
fix/find-file-palette-xss

Conversation

@bajrangCoder

Copy link
Copy Markdown
Member

No description provided.

@greptile-apps

greptile-apps Bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Sanitizes input-hint HTML with DOMPurify before rendering it through innerHTML, preventing executable markup while retaining supported hint formatting.

Confidence Score: 5/5

The PR appears safe to merge, with input-hint markup now sanitized before HTML insertion.

DOMPurify is already available and used with the same import pattern in browser-rendered code, and its default sanitization preserves the ordinary structural and presentation markup used by existing hints while removing unsafe content.

Important Files Changed

Filename Overview
src/components/inputhints/index.js Adds the repository’s existing DOMPurify sanitization pattern at the input-hint HTML rendering boundary; no actionable regressions identified.

Reviews (1): Last reviewed commit: "fix: sanitize input hints to prevent XSS" | Re-trigger Greptile

@bajrangCoder
bajrangCoder added this pull request to the merge queue Jul 31, 2026
Merged via the queue into main with commit b097676 Jul 31, 2026
11 checks passed
@github-project-automation github-project-automation Bot moved this from Backlog to Done in The Code Board - Acode Jul 31, 2026
@bajrangCoder
bajrangCoder deleted the fix/find-file-palette-xss branch July 31, 2026 11:16
@devilhunter001

Copy link
Copy Markdown

👍👍👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants