Files
triggerdotdev--trigger.dev/apps/webapp/app/utils
Katia Bulatova 65c60dfbba fix(webapp): reject CSP-delimiter characters in the img-src allowlist
A CSP_IMG_SRC_ALLOWLIST entry containing ';' passed URL parsing and landed verbatim in the space-joined img-src directive, injecting or truncating a directive. Reject entries containing ';' or ',' alongside the existing wildcard and whitespace checks.
2026-08-10 14:21:10 +00:00
..
2024-11-19 13:14:25 +00:00
2026-06-26 09:01:37 +01:00
2026-07-08 15:11:40 +02:00
2026-03-05 11:05:45 +00:00
2025-03-05 14:40:14 +00:00
2026-03-23 16:07:30 +01:00