pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-07-26 09:52:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): replace includes with startsWith for CodeQL url sanitization

Browse Source
This commit is contained in:
diegosouzapw
2026-04-07 23:56:10 -03:00
parent 6fada51fe8
commit 67740a00bd
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
tests/unit/chatcore-translation-paths.test.mjs
View File

@@ -806,7 +806,7 @@ test("chatCore refreshes GitHub credentials after 401 and retries with the refre
refreshedCredentials = updated;
},
responseFactory(captured, seenCalls) {
if (captured.url.includes("https://api.github.com/copilot_internal/v2/token")) {
if (captured.url.startsWith("https://api.github.com/copilot_internal/v2/token")) {
return new Response(
JSON.stringify({
token: "copilot-refreshed-token",
@@ -820,7 +820,7 @@ test("chatCore refreshes GitHub credentials after 401 and retries with the refre
}
const providerCalls = seenCalls.filter((entry) =>
entry.url.includes("https://api.githubcopilot.com/")
entry.url.startsWith("https://api.githubcopilot.com/")
);
if (providerCalls.length === 1) {
return new Response(
@@ -839,7 +839,7 @@ test("chatCore refreshes GitHub credentials after 401 and retries with the refre
});
const payload = await result.response.json();
const providerCalls = calls.filter((entry) => entry.url.includes("https://api.githubcopilot.com/"));
const providerCalls = calls.filter((entry) => entry.url.startsWith("https://api.githubcopilot.com/"));
assert.equal(result.success, true);
assert.equal(providerCalls.length, 2);