Humphrey 5f509a1c1f

fix(sanitizer): strip alt text from reference-style markdown images (#1488) ...

stripMarkdownImageAltText removed alt text from inline images
(![alt](url)) but not reference-style images (![alt][ref]), because the
regex requires the "](" of the inline form. Alt text is a
hidden-instruction channel that reaches the prompt via sanitizeContent,
so the reference-style form let it survive.

Add a matching replace for the reference-style form (![alt][ref] ->
![][ref]), preserving the [ref] label so the image definition still
resolves. Adds regression tests.

Co-authored-by: Contributor <you@example.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-15 20:21:12 -07:00

..

fixtures

feat: add Agent SDK support with USE_AGENT_SDK feature flag (#698)

2025-12-03 17:22:04 -08:00

modes

fix(mcp): align allowed-tools parser with SDK option parser (#1373)

2026-06-13 22:49:34 -07:00

actor-filter.test.ts

feat: add actor-based comment filtering to GitHub data fetching (#812)

2026-01-27 07:48:10 -08:00

actor.test.ts

Resolve actor account type before applying allowed_bots (#1330)

2026-05-19 16:30:49 -07:00

branch-cleanup.test.ts

Fix: Pass correct branch names to MCP file ops server (#279)

2025-07-15 17:10:23 -07:00

branch-template.test.ts

fix: sanitize {{label}} in branch name templates (#1492)

2026-07-15 20:21:02 -07:00

comment-logic.test.ts

feat: add Agent SDK support with USE_AGENT_SDK feature flag (#698)

2025-12-03 17:22:04 -08:00

comments-common.test.ts

test: cover prepareContext validation error branches (#1460)

2026-07-15 20:20:53 -07:00

create-prompt.test.ts

test: cover prepareContext validation error branches (#1460)

2026-07-15 20:20:53 -07:00

data-fetcher.test.ts

fix: filter PR reviews and inline review comments to trigger time (#1385)

2026-06-22 14:41:33 -07:00

data-formatter.test.ts

Include labels in formatContext() output for issues and PRs (#1298)

2026-06-11 21:19:15 -07:00

extract-user-request.test.ts

feat: send user request as separate content block for slash command support (#785)

2026-01-02 17:57:13 -08:00

format-turns.test.ts

test: cover format-turns content-type fallbacks and system_other handling (#1421)

2026-06-22 14:41:41 -07:00

github-context.test.ts

test: add unit tests for parseGitHubContext and context type guards (#1404)

2026-06-11 21:16:45 -07:00

github-file-ops-path-validation.test.ts

feat: add path validation for commit_files MCP tool (#796)

2026-01-07 10:16:31 -08:00

image-downloader.test.ts

fix(image-downloader): detect image type from magic bytes (#1396)

2026-06-11 21:23:35 -07:00

inline-comment-buffer.test.ts

Drop buffered inline comment when it is posted live (#1405) (#1412)

2026-07-03 22:37:36 -07:00

install-mcp-server.test.ts

feat(inline-comment): add confirmed param + probe-pattern safety net (#1048)

2026-03-12 00:12:55 -07:00

install-pipefail.test.ts

fix: propagate curl failures in install pipeline (#1241)

2026-07-03 22:38:53 -07:00

integration-sanitization.test.ts

Add enhanced text sanitization (#83)

2025-05-29 16:35:50 -07:00

mockContext.ts

fix: fall back to repo default_branch instead of hardcoded "main" (#1143)

2026-04-01 14:48:46 -07:00

parse-permissions.test.ts

Revert "Revert "feat: send additional_permissions in token exchange request (…" (#866)

2026-01-27 14:35:18 -08:00

permissions.test.ts

Resolve actor account type before applying allowed_bots (#1330)

2026-05-19 16:30:49 -07:00

prepare-context.test.ts

fix: commentBody may be null (#706)

2025-12-03 17:34:31 -08:00

pull-request-target.test.ts

fix: handle fork PRs by fetching via refs/pull/N/head (#962) (#963)

2026-04-14 20:33:04 -07:00

restore-config.test.ts

fix(restore): handle symlinked CLAUDE.md paths during config snapshot (#1441)

2026-07-03 22:38:23 -07:00

sanitizer.test.ts

fix(sanitizer): strip alt text from reference-style markdown images (#1488)

2026-07-15 20:21:12 -07:00

ssh-signing.test.ts

fix: ensure SSH signing key has trailing newline (#834)

2026-01-16 14:44:22 -08:00

token.test.ts

fix: skip workflow validation token exchange failures (#1417)

2026-06-17 13:53:35 -07:00

trigger-validation.test.ts

fix: make trigger_phrase match case-insensitive (#1279)

2026-05-02 10:10:30 -07:00

update-claude-comment.test.ts

feat: add unified update_claude_comment tool (#98)

2025-06-02 12:15:25 -07:00

url-encoding.test.ts

Initial commit

2025-05-19 08:32:32 -07:00

validate-branch-name.test.ts

fix: allow @ in branch names (valid per git-check-ref-format) (#1411)

2026-06-22 14:42:36 -07:00