Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: permissive regex #9966

Merged
merged 1 commit into from May 9, 2024
Merged

fix: permissive regex #9966

merged 1 commit into from May 9, 2024

Conversation

mdtro
Copy link
Member

@mdtro mdtro commented May 8, 2024

Pre-merge checklist

  • Checked Vercel preview for correctness, including links
  • PR was reviewed and approved by any necessary SMEs
  • PR was reviewed and approved by a member of the Sentry docs team

Description of changes

Fix the relativizeUrl function's permissive regex. The original pattern could match any domain name that contains "docs.sentry.io" in it. For example, it would match http://docs.sentry.io.malicious-site.com.

Resolves CodeQL scanning alert: https://github.com/getsentry/sentry-docs/security/code-scanning/2

Copy link

vercel bot commented May 8, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
sentry-docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 8, 2024 10:00pm

@mdtro mdtro changed the title fix permissive regex fix: permissive regex May 8, 2024
Copy link

codecov bot commented May 8, 2024

Bundle Report

Changes will increase total bundle size by 16 bytes ⬆️

Bundle name Size Change
sentry-docs-server 7.43MB 11 bytes ⬆️
sentry-docs-edge-server 456.68kB 3 bytes ⬇️
sentry-docs-client 6.16MB 8 bytes ⬆️

@mdtro mdtro merged commit 28927ad into master May 9, 2024
8 checks passed
@mdtro mdtro deleted the mdtro/fix-regex branch May 9, 2024 15:12
antonpirker pushed a commit that referenced this pull request May 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants