Skip to content

Conversation

@hyperpolymath
Copy link
Owner

…pters

Security improvements:

  • Add Validate module with input validation helpers (slug validation, path traversal detection, URL encoding)
  • Fix URL injection vulnerability in Bitbucket adapter by validating workspace, repo, and branch parameters before URL construction
  • Add proper URL encoding for all path components and query parameters
  • Validate positive integers for PR/issue IDs

Code quality:

  • Fix deprecated Exn.Error/Exn.message → JsExn.fromException/JsExn.message
  • Fix deprecated Js.Re.test_ → RegExp.test with RegExp.fromString
  • Update rescript.json: bs-dependencies → dependencies

…pters

Security improvements:
- Add Validate module with input validation helpers (slug validation,
  path traversal detection, URL encoding)
- Fix URL injection vulnerability in Bitbucket adapter by validating
  workspace, repo, and branch parameters before URL construction
- Add proper URL encoding for all path components and query parameters
- Validate positive integers for PR/issue IDs

Code quality:
- Fix deprecated Exn.Error/Exn.message → JsExn.fromException/JsExn.message
- Fix deprecated Js.Re.test_ → RegExp.test with RegExp.fromString
- Update rescript.json: bs-dependencies → dependencies
@hyperpolymath hyperpolymath merged commit e663576 into main Dec 17, 2025
1 check failed
@hyperpolymath hyperpolymath deleted the claude/review-scm-security-JRhHJ branch December 17, 2025 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants