Skip to content

fix: escape user-controlled data in order.log() and objects_to_hyperlinks() - #2522

Open
TempleOfSats wants to merge 5 commits into
RoboSats:mainfrom
TempleOfSats:pr-20260705-170319-xss-escape-order-logs
Open

fix: escape user-controlled data in order.log() and objects_to_hyperlinks()#2522
TempleOfSats wants to merge 5 commits into
RoboSats:mainfrom
TempleOfSats:pr-20260705-170319-xss-escape-order-logs

fix: store order logs as JSON instead of HTML (resolves XSS)

c1831bc
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Aug 12, 2026 in 3s

No new alerts in code changed by this pull request

View all branch alerts.