Repository navigation

fix(security): parser-based SVG/MDX scanning, replacing per-bypass regex patches - #1245

Merged

mrbobbytables merged 2 commits into

mrbobbytables:sec/parser-based-content-scanners

Oct 9, 2026

Merged

fix(security): parser-based SVG/MDX scanning, replacing per-bypass regex patches#1245
mrbobbytables merged 2 commits into
cncf:mainfrom
mrbobbytables:sec/parser-based-content-scanners

Commits on Oct 9, 2026
- fix(security): parse SVG, MDX and Markdown images instead of pattern-matching them
  
  mrbobbytables
  and
  Copilot
  committed
  4c42e17
- fix(security): scan the SVG prolog for a DOCTYPE without backtracking
  
  mrbobbytables
  and
  Copilot
  committed
  092d7a9