Skip to content

fix(website): Validate GitHub repository URLs - #102

Merged
MathurAditya724 merged 1 commit into
mainfrom
codex/fix-github-url-parsing
Sep 4, 2026
Merged

fix(website): Validate GitHub repository URLs#102
MathurAditya724 merged 1 commit into
mainfrom
codex/fix-github-url-parsing

Conversation

@MathurAditya724

Copy link
Copy Markdown
Member

The repository form now parses submitted URLs and accepts URL input only when its hostname is exactly github.com. Existing owner/repo shorthand and canonical GitHub URLs continue to work, while embedded and lookalike hosts are rejected.

Regression coverage includes the bypass variants reported by CodeQL alert #2.

@github-actions

github-actions Bot commented Sep 4, 2026

Copy link
Copy Markdown

Codecov Results 📊

212 passed | Total: 212 | Pass Rate: 100% | Execution Time: 372ms

📊 Comparison with Base Branch

Metric Change
Total Tests 📈 +7
Passed Tests 📈 +7
Failed Tests
Skipped Tests

All tests are passing successfully.

✅ Patch coverage is 87.50%. Project has 684 uncovered lines.
✅ Project coverage is 61.6%. Comparing base (d9789bf) to head (a3d929a).

Files with missing lines (1)
File Patch % Lines
website/src/lib/repository-url.ts 87.50% ⚠️ 2 Missing and 2 partials
Coverage diff
@@            Coverage Diff             @@
##          main       #PR       +/-##
==========================================
+ Coverage    61.37%    61.60%    +0.23%
==========================================
  Files           24        25        +1
  Lines         1761      1777       +16
  Branches      1269      1281       +12
==========================================
+ Hits          1079      1093       +14
- Misses         682       684        +2
- Partials       105       107        +2

Generated by Codecov Action

Parse submitted repository URLs before checking their hostname to reject embedded and lookalike hosts.
@MathurAditya724
MathurAditya724 force-pushed the codex/fix-github-url-parsing branch from a4c8f05 to a3d929a Compare September 4, 2026 18:21
@MathurAditya724
MathurAditya724 marked this pull request as ready for review September 4, 2026 18:27
@MathurAditya724
MathurAditya724 merged commit ddb065d into main Sep 4, 2026
14 checks passed
@MathurAditya724
MathurAditya724 deleted the codex/fix-github-url-parsing branch September 4, 2026 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant