Feat/security markdown audit - #2

Merged

louis14448 merged 9 commits into

gnoverse:mainfrom

louis14448:feat/security-markdown-audit

Jun 1, 2026

Commits on Jun 1, 2026

audit(security): add markdown injection audit scripts (KNOWN VULNERABLE — gnolang/gno#5714)
louis14448
committed
fix(security-markdown): use maketx call instead of maketx run for injection (interrealm #5669 compat)
louis14448
committed
chore: add .gitignore to exclude .env files
louis14448
committed
fix(security-markdown): mark realm functions crossing (cur realm) for MsgCall compat (#5669)
louis14448
committed
audit(security-markdown): add two new vectors, translate to English, fix title injection
louis14448
committed
remove(security-markdown): drop audit_md_anchor_hijack — fragment hijacking requires gnoweb, not testable at VM level
louis14448
committed
fix(security-markdown): wire 5th audit script, translate KNOWN notes, bump funding to 150M
louis14448
committed
fix(security-markdown): REMOTES → REMOTE, drop obsolete fallback in common.sh
louis14448
committed
remove(gitignore): drop root .gitignore — .env is not committed anywhere
louis14448
committed