ext/hyperframes
2
0
Fork 0
mirror of https://github.com/heygen-com/hyperframes.git synced 2026-09-03 12:52:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(bundler): tolerate whitespace in closing script tag

Browse Source 
CodeQL's `js/bad-tag-filter` rule flagged `</script>` as too strict —
`</script >` (with whitespace before `>`) is valid HTML and would slip
past the matcher. Changed to `</script\s*>` for full defense-in-depth.

The bundler always emits the canonical form, so no real-traffic miss —
this is hardening the test's parse-loop, not fixing a downstream bug.

Addresses CodeQL alert on #641.
This commit is contained in:
James
2026-05-06 04:59:41 +00:00
parent 93ab216f2b
commit b075f90b78
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/core/src/compiler/htmlBundler.test.ts
+1 -1
View File
@@ -107,7 +107,7 @@ describe("bundleToSingleHtml", () => {
// the separator, parse would fail with an unexpected-token error somewhere
// around the chunk boundary.
const { transformSync } = await import("esbuild");
const re = /<script\b[^>]*>([\s\S]*?)<\/script>/gi;
const re = /<script\b[^>]*>([\s\S]*?)<\/script\s*>/gi;
let m: RegExpExecArray | null;
while ((m = re.exec(bundled)) !== null) {
const body = m[1];