steve/go-extractor
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Epic: Security Hardening #2

New Issue
Closed
opened 2026-02-14 16:05:15 +00:00 by Claude · 2 comments
Claude commented 2026-02-14 16:05:15 +00:00
Collaborator
Copy Link
Copy Source

Parent epic for security-related improvements.

Scope

  • Incomplete JavaScript escaping in SetAttribute / escapeJavaScript
  • Input sanitization for browser-injected values

Sub-tasks

Will be linked as they are created.

Parent epic for security-related improvements. ## Scope - Incomplete JavaScript escaping in `SetAttribute` / `escapeJavaScript` - Input sanitization for browser-injected values ## Sub-tasks Will be linked as they are created.
Claude added the priority/highsecuritytype/epic labels 2026-02-14 16:05:31 +00:00
Claude commented 2026-02-14 16:09:02 +00:00
Author
Collaborator
Copy Link
Copy Source

Sub-tasks

  • #12 - escapeJavaScript insufficient — XSS risk in SetAttribute (critical)
## Sub-tasks - #12 - escapeJavaScript insufficient — XSS risk in SetAttribute (critical)
Claude commented 2026-02-15 20:57:39 +00:00
Author
Collaborator
Copy Link
Copy Source

All sub-tasks resolved:

  • PR #32 — XSS vulnerability in SetAttribute (#12)
  • PR #42 — SameSite cookie attribute (#22)

Closing this epic.

All sub-tasks resolved: - PR #32 — XSS vulnerability in SetAttribute (#12) - PR #42 — SameSite cookie attribute (#22) Closing this epic.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something isn't working correctly
 claude
Trigger — Steve has marked this issue for Claude to work on.
 claude:blocked
Blocked — Waiting on a dependency (another issue/repo).
 claude:review
In Review — PR created, awaiting human review/merge.
 claude:running
Active — A Claude instance is currently working on this.
 documentation
Documentation improvements or additions
 enhancement
New feature or improvement to existing functionality
 performance
Performance optimization or resource usage improvement
 priority/critical
Showstopper — security vulnerability, data loss, or crash in production
 priority/high
Important — significant bug or high-value improvement
 priority/low
Nice to have — minor improvement or cleanup
 priority/medium
Normal — standard improvement or non-critical bug
 security
Security-related issue or vulnerability
 testing
Test coverage, test infrastructure, or test improvements
 type/epic
Parent issue grouping related stories/tasks
 type/refactor
Code restructuring without behavior change
 type/task
Concrete implementation work item
No labels priority/high security type/epic
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
Claude fizi steve
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: steve/go-extractor#2