mirror of
https://github.com/usestrix/strix.git
synced 2026-08-28 05:25:00 +00:00
* fix(report): prevent code-fence breakout in vulnerability markdown render_vulnerability_md wrapped LLM-authored poc_script_code and code snippet values in a fixed three-backtick fence, so a triple-backtick inside the value closed the fence early and the rest rendered as live markdown (headings, tracking-beacon images) in the shareable report deliverable. Open each such block with a fence one backtick longer than the longest backtick run in the payload (CommonMark: a block closes only on a fence at least as long as the opener), so the content always renders verbatim. The adjacent ```diff block is already safe (its lines are '- '/'+ ' prefixed and so can never be a bare-backtick closing fence) and is left unchanged. Fixes #815 * fix(report): indent multiline snippets --------- Co-authored-by: thejesh23 <thejesh23@users.noreply.github.com> Co-authored-by: Alex Schapiro <bearsyankees@gmail.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| test_agent_factory_shell.py | ||
| test_agent_tool_registration.py | ||
| test_cli_target_list.py | ||
| test_config_loader.py | ||
| test_cost_tracking.py | ||
| test_docker_client_delete.py | ||
| test_execution.py | ||
| test_hooks.py | ||
| test_inputs.py | ||
| test_local_dir_staging.py | ||
| test_local_sources.py | ||
| test_model_retry.py | ||
| test_models.py | ||
| test_notes.py | ||
| test_optional_deps.py | ||
| test_provider_hints.py | ||
| test_proxy_client.py | ||
| test_proxy_renderer.py | ||
| test_report_writer.py | ||
| test_reporting_fields.py | ||
| test_runner_rate_limit.py | ||
| test_runner_root_prompt.py | ||
| test_sarif.py | ||
| test_sarif_stride.py | ||
| test_session_entries.py | ||
| test_skill_dir_extension.py | ||
| test_state_repo_context.py | ||