Skip to content

fix(security): chat attachment XSS, MCP OAuth SSRF guards, Teams clientState verification #4877

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
waleedlatif1 merged 6 commits into from
Jun 4, 2026

improvement(chat): hoist HTML escape map to module-level constant

617073c
Select commit
Loading
Failed to load commit list.
Merged

fix(security): chat attachment XSS, MCP OAuth SSRF guards, Teams clientState verification #4877

improvement(chat): hoist HTML escape map to module-level constant
617073c
Select commit
Loading
Failed to load commit list.
Cursor / Cursor Bugbot succeeded Jun 4, 2026 in 1m 15s

Bugbot Review

Bugbot Analysis Progress (1m 22s elapsed)

✅ Gathered PR context (7s)
✅ Completed bug detection (1m 15s)
✅ Posted analysis results (1s)

Final Result: Bugbot completed review - no issues found! ✅

Request ID: serverGenReqId_737508a8-aba5-45d9-9b12-35cc3af4e111

Details

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit 617073c. Configure here.

View more details on Cursor