Skip to content

Fix CodeQL place HTML cleanup alert#105

Merged
hmmhmmhm merged 1 commit into
mainfrom
fix/codeql-place-clean-html
Jun 21, 2026
Merged

Fix CodeQL place HTML cleanup alert#105
hmmhmmhm merged 1 commit into
mainfrom
fix/codeql-place-clean-html

Conversation

@hmmhmmhm

Copy link
Copy Markdown
Owner

Summary

  • replace regex-based HTML tag stripping in Naver local place normalization with a character scanner
  • keep entity decoding limited so encoded <script> text is not rehydrated into executable-looking HTML

Verification

  • npm test -- tests/services/places/client.test.ts
  • npm run test:coverage
  • npm run build
  • npm run check

@hmmhmmhm hmmhmmhm merged commit e112d0c into main Jun 21, 2026
6 checks passed
@hmmhmmhm hmmhmmhm deleted the fix/codeql-place-clean-html branch June 21, 2026 07:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant