Skip to content

Fix exchange url injection - #104

Merged
shangl merged 1 commit into
GoogleChromeLabs:mainfrom
shangl:fix-exchange-url-injection
Sep 16, 2026
Merged

shangl merged 1 commit into
GoogleChromeLabs:mainfrom
shangl:fix-exchange-url-injection

Validate exchange URL origin to prevent injection into signed bundles

fef73dc
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Sep 16, 2026 in 21s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

✅ fef73dc PR Opener: @shangl <sim******gl​@student.uibk.ac.at>
✅ fef73dc Author: <si****a​@google.com>

(Only the first commit for a unique contributor is listed.)