Skip to content

fix(security): decode CSS escapes before the remote-reference gate - #1090

Merged
mrbobbytables merged 2 commits into
mainfrom
sec/fix-css-escape-remote-refs
Oct 7, 2026
Merged

fix(security): decode CSS escapes before the remote-reference gate#1090
mrbobbytables merged 2 commits into
mainfrom
sec/fix-css-escape-remote-refs

fix(security): make CSS_URL_PATTERN's bare-url branch backtrack linearly

053d3c7
Select commit
Loading
Failed to load commit list.
DCO / DCO succeeded Oct 7, 2026 in 1s

DCO

All commits are signed off!

View more details on DCO