Skip to content

fix(security): close CodeQL sanitizer findings and unfreeze crawler lanes - #2544

Merged
twoimo merged 1 commit into
datafrom
develop
Aug 16, 2026
Merged

twoimo merged 1 commit into
datafrom
develop

Conversation

@twoimo

@twoimo twoimo commented Aug 16, 2026

Copy link
Copy Markdown
Owner

Summary

  • Fix the open CodeQL sanitizer, hostname, randomness, and XSS findings.
  • Remove G037 write-freeze from Crawler and Backfill so those jobs can run on protected main. Account deletion and retention stay freeze-gated.

Promotion

  • `develop -> data -> main` merge commits only.

…anes

Harden HTML/URL sanitizers, hostname checks, and presence IDs. Keep G037 freeze on privacy writers only so Crawler and Backfill can run on protected main.
@vercel

vercel Bot commented Aug 16, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tzudong Ready Ready Preview Aug 16, 2026 12:40pm

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@twoimo
twoimo merged commit 6e51f6a into data Aug 16, 2026
30 of 33 checks passed

This branch was successfully deployed

1 active deployment
Preview — 75c19e95 Deployed Aug 16, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant