scriptoriumadmin/Roo-Code
1
0
Fork 0
mirror of https://github.com/RooVetGit/Roo-Code.git synced 2026-08-28 05:27:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Roo-Code/src
History
Exact
Roo Code a9e4f1ef3c fix: address CodeQL security vulnerabilities in URL handling 
- Validate and sanitize URLs before loading in iframe
- Use URL constructor to parse and validate URLs
- Only allow HTTP and HTTPS protocols
- Use setAttribute instead of direct property assignment
- Add proper error handling for invalid URLs

This fixes:
- Client-side URL redirect vulnerability
- DOM text reinterpreted as HTML
- Client-side cross-site scripting (XSS)
2025-07-20 05:46:16 +00:00
..
__mocks__ feature: add toggle for disable mcp server tool from prompt (#3551) 2025-06-20 19:14:59 -04:00
__tests__ feat: add integrated web preview panel with element selection 2025-07-20 05:37:14 +00:00
activate feat: add integrated web preview panel with element selection 2025-07-20 05:37:14 +00:00
api Feature/vertex ai model name conversion (#5728) 2025-07-15 14:15:33 -04:00
assets PNPM + Turbo monorepo + Nightly releases (#3407) 2025-05-21 21:01:20 -07:00
core fix: address CodeQL security vulnerabilities in URL handling 2025-07-20 05:46:16 +00:00
extension Log API-initiated tasks to a tmp directory (#5833) 2025-07-17 11:47:21 -07:00
i18n feat: Add Mistral embedding provider (#5932) (#5946) 2025-07-19 13:24:24 -04:00
integrations fix: add character limit to prevent terminal output context explosion (#5777) 2025-07-19 13:26:25 -04:00
services feat: Add Mistral embedding provider (#5932) (#5946) 2025-07-19 13:24:24 -04:00
shared feat: add integrated web preview panel with element selection 2025-07-20 05:37:14 +00:00
utils Make the default architect prompt create a todo list (#5472) 2025-07-08 13:59:48 -04:00
workers Count tokens worker (#3037) 2025-04-29 12:29:25 -07:00
.gitignore PNPM + Turbo monorepo + Nightly releases (#3407) 2025-05-21 21:01:20 -07:00
.prettierignore PNPM + Turbo monorepo + Nightly releases (#3407) 2025-05-21 21:01:20 -07:00
.vscodeignore feat: add LaTeX math equation rendering in chat window (#4258) (#4786) 2025-06-20 15:45:18 -04:00
esbuild.mjs Try to fix win32 esbuild (#4479) 2025-06-09 15:03:44 -07:00
eslint.config.mjs feat: add integrated web preview panel with element selection 2025-07-20 05:37:14 +00:00
extension.ts feat: add integrated web preview panel with element selection 2025-07-20 05:37:14 +00:00
package.json feat: add integrated web preview panel with element selection 2025-07-20 05:37:14 +00:00
package.nls.ca.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.de.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.es.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.fr.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.hi.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.id.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.it.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.ja.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.ko.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.nl.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.pl.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.pt-BR.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.ru.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.tr.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.vi.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.zh-CN.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
package.nls.zh-TW.json Add command timeout allowlist with IPC support (#5910) 2025-07-18 16:48:39 -04:00
tsconfig.json fix typescript compiler watch path inconsistency (#5155) 2025-07-08 10:40:01 -04:00
turbo.json Improve turbo task dependency declarations (#4323) 2025-06-04 09:32:27 -07:00
vitest.config.ts Fix #4958: Increase vitest timeout for Windows CI (#4959) 2025-06-20 17:14:42 -07:00
vitest.setup.ts Farewell jest (#4607) 2025-06-16 21:39:45 -07:00