mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-24 20:53:06 +00:00
01323fdf6d
CodeQL js/incomplete-hostname-regexp (alert #96) traced DOCS_URL into the RegExp built in the "Learn more" assertion. The dots were escaped with [.], which CodeQL does not recognize as a sanitizer. A substring match on the exact markup needs no escaping and keeps the same checks: a space after the sentence, the exact href with target/rel, and "Learn more" as the link text. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>