Ashwin Bhat 6337623ebb

fix: prevent TOCTOU race condition on issue/PR body edits (#710) ...

Add trigger-time validation for issue/PR body content to prevent attackers
from exploiting a race condition where they edit the body between when an
authorized user triggers @claude and when Claude processes the request.

The existing filterCommentsToTriggerTime() already protected comments -
this extends the same pattern to the main issue/PR body via isBodySafeToUse().

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>

2025-12-01 07:59:39 -08:00

..

fixtures

fix: include cache tokens in token usage display (#367)

2025-08-01 07:40:07 -07:00

modes

Add support for kebab-case --allowed-tools flag (#581)

2025-09-22 09:18:04 -07:00

actor.test.ts

feat: add flexible bot access control with allowed_bots option (#117)

2025-08-07 18:03:20 -07:00

branch-cleanup.test.ts

Fix: Pass correct branch names to MCP file ops server (#279)

2025-07-15 17:10:23 -07:00

comment-logic.test.ts

Fix: Pass correct branch names to MCP file ops server (#279)

2025-07-15 17:10:23 -07:00

create-prompt.test.ts

feat: enhance mode routing with track_progress and context preservation (#506)

2025-08-28 17:58:32 -07:00

data-fetcher.test.ts

fix: prevent TOCTOU race condition on issue/PR body edits (#710)

2025-12-01 07:59:39 -08:00

data-formatter.test.ts

feat: exclude hidden (minimized) comments from GitHub Issues and PRs (#368)

2025-07-30 07:18:34 -07:00

format-turns.test.ts

feat: add formatted output for Claude Code execution reports (#18)

2025-07-03 10:59:12 -07:00

image-downloader.test.ts

feat: Add HTML img tag support to GitHub image downloader (#402)

2025-08-04 19:37:50 -07:00

install-mcp-server.test.ts

fix(tag): no such tool available mcp__github_* (#556)

2025-09-12 12:33:34 -07:00

integration-sanitization.test.ts

Add enhanced text sanitization (#83)

2025-05-29 16:35:50 -07:00

mockContext.ts

feat: add allowed_non_write_users input to bypass permission checks (#550)

2025-09-07 14:20:02 -07:00

permissions.test.ts

feat: add allowed_non_write_users input to bypass permission checks (#550)

2025-09-07 14:20:02 -07:00

prepare-context.test.ts

feat: implement Claude Code GitHub Action v1.0 with auto-detection and slash commands (#421)

2025-08-25 12:51:37 -07:00

pull-request-target.test.ts

fix: add support for pull_request_target event in GitHub Actions workflows (#579)

2025-09-22 09:20:27 -07:00

sanitizer.test.ts

Add GitHub token redaction to comment tools (#453)

2025-08-15 13:04:52 -07:00

trigger-validation.test.ts

feat: implement Claude Code GitHub Action v1.0 with auto-detection and slash commands (#421)

2025-08-25 12:51:37 -07:00

update-claude-comment.test.ts

feat: add unified update_claude_comment tool (#98)

2025-06-02 12:15:25 -07:00

url-encoding.test.ts

Initial commit

2025-05-19 08:32:32 -07:00