Skip to content

fix(docs): harden generated markdown handling - #156

Merged
777genius merged 1 commit into
mainfrom
fix/docs-generator-security
Sep 6, 2026
Merged

fix(docs): harden generated markdown handling#156
777genius merged 1 commit into
mainfrom
fix/docs-generator-security

Conversation

@777genius

Copy link
Copy Markdown
Owner

Summary

  • encode generated YAML scalar values with JSON-compatible YAML quoting
  • replace the potentially super-linear Markdown link regex with a bounded scanner
  • replace comment removal with a deterministic delimiter scan
  • remove a no-op replacement and add focused Node regression tests

Evidence

  • node --test website/tools/lib/frontmatter.test.mjs
  • corepack pnpm@8.15.1 --dir website run docs:test
  • git diff --check

Addresses CodeQL alerts #2, #3, #4, and #5.

@coderabbitai

coderabbitai Bot commented Sep 6, 2026

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 31 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: d0244140-a37e-4e3c-ae5d-93f3280ca1c8

📥 Commits

Reviewing files that changed from the base of the PR and between aa9e03e and 842d4ea.

📒 Files selected for processing (4)
  • website/package.json
  • website/tools/extractors/node-runtime.mjs
  • website/tools/lib/frontmatter.mjs
  • website/tools/lib/frontmatter.test.mjs

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@777genius
777genius merged commit b0b4268 into main Sep 6, 2026
16 checks passed
@777genius
777genius deleted the fix/docs-generator-security branch September 6, 2026 00:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant