Skip to content

Conversation

@dogusata
Copy link
Contributor

Problem

  • Links incoming from Q responses can redirect to a vulnerable site depending on the used context from the files.

Solution

  • Linkify strategy is updated to only accept links with [TEXT](URL) format. (through MynahUI version 4.21.6)

MynahUI PR:
aws/mynah-ui#226
Screenshot 2025-01-23 at 20 13 48


  • Treat all work as PUBLIC. Private feature/x branches will not be squash-merged at release time.
  • Your code changes must meet the guidelines in CONTRIBUTING.md.
  • License: I confirm that my contribution is made under the terms of the Apache 2.0 license.

…ing in markdown other than [TEXT](URL) format
@dogusata dogusata requested a review from a team as a code owner January 28, 2025 16:09
@dogusata dogusata changed the title fix(Amazon Q): For security reasons, disabled auto linkify for pure text links fix(amazonq): For security reasons, disabled auto linkify for pure text links Jan 28, 2025
@jpinkney-aws jpinkney-aws reopened this Jan 28, 2025
@justinmk3 justinmk3 merged commit dca8c5d into aws:master Jan 28, 2025
22 of 24 checks passed
@dogusata dogusata deleted the dogusata/update-linkify-for-link-texts branch January 29, 2025 09:04
justinmk3 pushed a commit that referenced this pull request Feb 3, 2025
## Problem
- The citation links are broken after the [linkify structure
change](#6449).

## Solution
- Updated link check pattern to accept `[[TEXT]](LINK)` format too which
is used for citations. **[MynahUI
v4.22.1](https://github.com/aws/mynah-ui/releases/tag/v4.22.1)**

[MynahUI PR](aws/mynah-ui#228)
s7ab059789 pushed a commit to s7ab059789/aws-toolkit-vscode that referenced this pull request Feb 19, 2025
…s#6449

## Problem
- Links incoming from Q responses can redirect to a vulnerable site
depending on the used context from the files.

## Solution
- Linkify strategy is updated to only accept links with `[TEXT](URL)`
format. (through MynahUI version
[4.21.6](https://github.com/aws/mynah-ui/releases/tag/v4.21.6))

MynahUI PR:
aws/mynah-ui#226
s7ab059789 pushed a commit to s7ab059789/aws-toolkit-vscode that referenced this pull request Feb 19, 2025
## Problem
- The citation links are broken after the [linkify structure
change](aws#6449).

## Solution
- Updated link check pattern to accept `[[TEXT]](LINK)` format too which
is used for citations. **[MynahUI
v4.22.1](https://github.com/aws/mynah-ui/releases/tag/v4.22.1)**

[MynahUI PR](aws/mynah-ui#228)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants