From 9d8b2dcbe67ca75642940ad5d2c5c2835d199806 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 21 Mar 2026 12:01:14 +0000 Subject: [PATCH 1/2] chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0c44bb9..b4462f4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10220,9 +10220,9 @@ } }, "node_modules/flatted": { - "version": "3.3.3", - "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.3.tgz", - "integrity": "sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==", + "version": "3.4.2", + "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz", + "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==", "dev": true, "license": "ISC" }, From 03de79f86e5ff6e0fd0cf21cdf13b859b0979748 Mon Sep 17 00:00:00 2001 From: Mehdi Date: Sat, 21 Mar 2026 15:52:17 +0000 Subject: [PATCH 2/2] fix(security): use RegExp.exec in navigation guard --- src/main/security/navigation-guard.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/security/navigation-guard.ts b/src/main/security/navigation-guard.ts index e685972..5dc4fd3 100644 --- a/src/main/security/navigation-guard.ts +++ b/src/main/security/navigation-guard.ts @@ -8,7 +8,7 @@ export const isAllowedExternalNavigationUrl = (url: string): boolean => { }; const normalizeFilePathname = (pathname: string): string => { - const driveLetterMatch = pathname.match(/^\/([A-Za-z]):/); + const driveLetterMatch = /^\/([A-Za-z]):/.exec(pathname); if (!driveLetterMatch) { return pathname; }