Files
streamyfin/scripts
Gauvino 116aff2f8e fix(pr-validation): strip HTML comments via linear scan to satisfy CodeQL
Replace the regex-based comment stripper (flagged by CodeQL
js/incomplete-multi-character-sanitization, alert #330) with a single linear
indexOf scan. Behaviour is identical on complete, unterminated and nested
comments, but there is no regex backtracking and no loop-until-stable, so the
CodeQL alert clears without reintroducing the CPU-DoS risk.
2026-06-05 13:15:39 +02:00
..
2025-01-06 10:14:17 +01:00