Repository navigation

fix(security): consolidated hardening of data validators and URL gates - #753

Merged

mrbobbytables merged 10 commits into

mrbobbytables:consolidate/security-validators

Sep 27, 2026

Merged

fix(security): consolidated hardening of data validators and URL gates#753
mrbobbytables merged 10 commits into
cncf:mainfrom
mrbobbytables:consolidate/security-validators

Commits on Sep 27, 2026
- fix(security): treat MDX expression braces as active content
  
  sec-check
  authored and
  mrbobbytables
  committed
  7ca6985
- fix(security): validate projects-born URLs before they render site-wide
  
  hivecommons-hive[bot]
  authored and
  mrbobbytables
  committed
  743bff2
- fix(security): gate SVGs in static/img and static/favicons at the site origin
  
  hivecommons-hive[bot]
  authored and
  mrbobbytables
  committed
  706ea67
- fix(security): keep the shallow static/img walk off declared asset roots
  
  hivecommons-hive[bot]
  authored and
  mrbobbytables
  committed
  c793acf
- fix(security): pin the community-group repository URL gate to https github.com
  
  hivecommons-hive[bot]
  authored and
  mrbobbytables
  committed
  f33dac3
- fix(security): validate every generated community-people section, not just rostered ones
  
  hivecommons-hive[bot]
  authored and
  mrbobbytables
  committed
  8a086f6
- fix(security): parse members.json URLs instead of prefix-matching them
  
  hivecommons-hive[bot]
  authored and
  mrbobbytables
  committed
  4bd2aed
- Merge remote-tracking branch 'upstream/main' into consolidate/security-validators
  mrbobbytables
  committed
  ea879b6
- ci: run validate:projects-born in the validate job
  
  mrbobbytables
  and
  Copilot
  committed
  1b92f0f
- fix(security): hold data/metrics.json URLs to a host allow-list
  
  sec-check
  authored and
  mrbobbytables
  committed
  de6281c