mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-09-15 23:32:46 +00:00
c1335421e4
`slack_link` builds `<url|label>`, and `escape_slack_controls` covers Slack's documented escapes (`&`, `<`, `>`) but not `|`. Slack has no escape for `|`, so a label containing one splits the markup and can make Slack reject the block. `is_safe_slack_link_url` already guards the URL half against `|`; the label half was unguarded. It did not matter before because the only labels were "Open in Fabro" and a PR number. Review target labels are model-authored, so this is now reachable. Replace `|` inside link labels, which keeps the link working. Plain-text labels are untouched, since `|` is fine outside link markup. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| blocks.rs | ||
| client.rs | ||
| config.rs | ||
| connection.rs | ||
| dispatch.rs | ||
| interaction.rs | ||
| lib.rs | ||
| payload.rs | ||
| socket.rs | ||
| threads.rs | ||