Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: PowerShellOrg/PowerShellOrgWebsite
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: PowerShellOrg/PowerShellOrgWebsite
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: security/fix-yaml-injection
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 1 file changed
  • 2 contributors

Commits on May 26, 2026

  1. Fix YAML frontmatter injection in event submission workflow 

    Replace hand-rolled f-string YAML serialization with yaml.safe_dump() to
prevent frontmatter injection via unescaped quotes in issue body fields.
Strip raw HTML from event descriptions to block stored XSS through
goldmark's unsafe renderer.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
    @HeyItsGilbert @claude
    HeyItsGilbert and claude committed May 26, 2026
    Configuration menu
    Copy the full SHA
    48e652c View commit details
    Browse the repository at this point in the history
Loading