Skip to content

fix(admin): validate GitHub URL host#3847

Merged
RSO merged 1 commit into
mainfrom
fix/codeql-264-github-host
Jun 9, 2026
Merged

fix(admin): validate GitHub URL host#3847
RSO merged 1 commit into
mainfrom
fix/codeql-264-github-host

Conversation

@kilo-code-bot

@kilo-code-bot kilo-code-bot Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Restrict OSS admin GitHub repository URL parsing to exact github.com and www.github.com hosts.
  • Avoid accepting arbitrary hosts that merely contain github.com, resolving CodeQL alert 264.

Verification

N/A - sanitizer-only code change; no manual UI flow exercised.

Visual Changes

N/A

Reviewer Notes

Resolves https://github.com/Kilo-Org/cloud/security/code-scanning/264.

@kilo-code-bot kilo-code-bot Bot requested a review from RSO June 9, 2026 09:35
@RSO RSO merged commit e2e943f into main Jun 9, 2026
16 checks passed
@RSO RSO deleted the fix/codeql-264-github-host branch June 9, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants