mirror of
https://github.com/supermemoryai/supermemory.git
synced 2026-09-30 01:51:28 +00:00
251e250935
Copilot review flagged that 'lower.includes("x.com")' and the regex
fallback match any substring of the input, so a URL like
'https://examplex.com/foo' or 'notwitter.com/foo' would parse, extract
'foo' as a handle, pass the 1-15 alphanumeric guard, and burn a Grok
call on a wrong handle.
Add an isXHost helper that checks the parsed hostname against x.com /
twitter.com (and their subdomains) instead of relying on substring
matches. Anchor the regex fallback to '^', '.', or '/' before the
domain so the same substring trap does not apply there either.
|
||
|---|---|---|
| .. | ||
| (app) | ||
| (auth)/login | ||
| api | ||
| auth/connect | ||
| ref | ||
| upgrade-mcp | ||
| global-error.tsx | ||
| icon.png | ||
| layout.tsx | ||
| manifest.ts | ||
| not-found.tsx | ||
| opengraph-image.png | ||
