Skip to content

Harden product URL validation and image tag rewriting - #640

Merged
PrzemyslawKlys merged 1 commit into
mainfrom
codex/product-review-followup
Jul 27, 2026
Merged

Harden product URL validation and image tag rewriting#640
PrzemyslawKlys merged 1 commit into
mainfrom
codex/product-review-followup

Conversation

@PrzemyslawKlys

Copy link
Copy Markdown
Member

Summary

  • reject protocol-relative and browser-normalized external targets where product and project catalog URLs require absolute HTTP(S) URLs or root-relative routes
  • preserve slashes that belong to unquoted <img> attribute values while still recognizing genuine self-closing image tags using HTML whitespace rules
  • cover literal and normalized network-path variants, Unicode separator handling, and the existing responsive-image rewrite contract

This follows up on the two review findings posted after #546 merged.

@PrzemyslawKlys
PrzemyslawKlys merged commit a682ffa into main Jul 27, 2026
7 checks passed
@PrzemyslawKlys
PrzemyslawKlys deleted the codex/product-review-followup branch July 27, 2026 08:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant