mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-08-28 05:27:41 +00:00
c1335421e4
`slack_link` builds `<url|label>`, and `escape_slack_controls` covers Slack's documented escapes (`&`, `<`, `>`) but not `|`. Slack has no escape for `|`, so a label containing one splits the markup and can make Slack reject the block. `is_safe_slack_link_url` already guards the URL half against `|`; the label half was unguarded. It did not matter before because the only labels were "Open in Fabro" and a PR number. Review target labels are model-authored, so this is now reachable. Replace `|` inside link labels, which keeps the link working. Plain-text labels are untouched, since `|` is fine outside link markup. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| src | ||
| Cargo.toml | ||