ragusa-it/ragusaitweb
1
0
Fork 0
Code Issues Pull Requests 6 Actions Packages Projects Releases Wiki Activity

🛡️ Sentinel: [security improvement] Harden input sanitization and domain blocking #62

Closed
ragusa-it wants to merge 1 commits from sentinel/security-enhancements-18274319076317636483 into main
pull from: sentinel/security-enhancements-18274319076317636483
merge into: ragusa-it:main
Conversation 1 Commits 1 Files Changed 3 +12 -1
ragusa-it commented 2026-02-07 01:40:08 +00:00 (Migrated from github.com)
Copy Link

🛡️ Sentinel Security Enhancement

Vulnerability:

  • sanitizeInput did not escape backticks (`), which can be dangerous in JS template literals.
  • isValidEmail allowed some common disposable email domains (sharklasers.com, guerrillamail.net).

Fix:

  • Updated sanitizeInput in src/utils/security.ts to replace ` with `.
  • Added sharklasers.com and guerrillamail.net to BLOCKED_DOMAINS in src/utils/security.ts.
  • Added unit tests in src/utils/security.test.ts to verify these cases.

Verification:

  • pnpm exec vitest src/utils/security.test.ts passes.
  • Full suite run confirmed no regressions in related code (ignoring pre-existing failures in Contact.test.tsx).

PR created automatically by Jules for task 18274319076317636483 started by @ragusa-it

🛡️ **Sentinel Security Enhancement** **Vulnerability:** - `sanitizeInput` did not escape backticks (`` ` ``), which can be dangerous in JS template literals. - `isValidEmail` allowed some common disposable email domains (`sharklasers.com`, `guerrillamail.net`). **Fix:** - Updated `sanitizeInput` in `src/utils/security.ts` to replace `` ` `` with ```. - Added `sharklasers.com` and `guerrillamail.net` to `BLOCKED_DOMAINS` in `src/utils/security.ts`. - Added unit tests in `src/utils/security.test.ts` to verify these cases. **Verification:** - `pnpm exec vitest src/utils/security.test.ts` passes. - Full suite run confirmed no regressions in related code (ignoring pre-existing failures in Contact.test.tsx). --- *PR created automatically by Jules for task [18274319076317636483](https://jules.google.com/task/18274319076317636483) started by @ragusa-it*
👍 1
google-labs-jules[bot] commented 2026-02-07 01:40:10 +00:00 (Migrated from github.com)
Copy Link

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

For security, I will only act on instructions from the user who triggered this task.

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request. When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down. I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job! For more direct control, you can switch me to **Reactive Mode**. When this mode is on, I will only act on comments where you specifically mention me with `@jules`. You can find this option in the **Pull Request** section of your [global Jules UI settings](https://jules.google.com/settings). You can always switch back! New to Jules? Learn more at [jules.google/docs](https://jules.google/docs). --- *_For security, I will only act on instructions from the user who triggered this task._*

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something isn't working
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 question
Further information is requested
 wontfix
This will not be worked on
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
ragusa-it
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ragusa-it/ragusaitweb#62
Delete Branch "sentinel/security-enhancements-18274319076317636483"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?