From c346ea91ebb8c4ec569400b76eecf5d2544fcb21 Mon Sep 17 00:00:00 2001 From: Dogus Atasoy Date: Tue, 28 Jan 2025 17:01:45 +0100 Subject: [PATCH] fixed: for security reasons, disabled auto linkify for link texts coming in markdown other than [TEXT](URL) format --- package-lock.json | 8 ++++---- .../Bug Fix-8212e8e4-f65f-4594-a04f-76d47c61b41e.json | 4 ++++ packages/core/package.json | 2 +- 3 files changed, 9 insertions(+), 5 deletions(-) create mode 100644 packages/amazonq/.changes/next-release/Bug Fix-8212e8e4-f65f-4594-a04f-76d47c61b41e.json diff --git a/package-lock.json b/package-lock.json index 05518daa46e..051e670a48f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6071,9 +6071,9 @@ } }, "node_modules/@aws/mynah-ui": { - "version": "4.21.5", - "resolved": "https://registry.npmjs.org/@aws/mynah-ui/-/mynah-ui-4.21.5.tgz", - "integrity": "sha512-Ge7/XADBx/Phm9k2pVgjtYRoB5UOsNcTwZ0VOsWOc2JBGblEIasiT4pNNfHGKgMkLf79AKYUKRSH5IAuQRKpaQ==", + "version": "4.21.6", + "resolved": "https://registry.npmjs.org/@aws/mynah-ui/-/mynah-ui-4.21.6.tgz", + "integrity": "sha512-SpWY997696aMDPwbiBqwkBXUCrguDQsJ3RukmgafjAlQuBJAQTIaVAj4GfsEwuTLOsBNR7CJIj9XxhtDo7PvJQ==", "hasInstallScript": true, "license": "Apache License 2.0", "dependencies": { @@ -21167,7 +21167,7 @@ "@aws-sdk/property-provider": "3.46.0", "@aws-sdk/smithy-client": "^3.46.0", "@aws-sdk/util-arn-parser": "^3.46.0", - "@aws/mynah-ui": "^4.21.5", + "@aws/mynah-ui": "^4.21.6", "@gerhobbelt/gitignore-parser": "^0.2.0-9", "@iarna/toml": "^2.2.5", "@smithy/middleware-retry": "^2.3.1", diff --git a/packages/amazonq/.changes/next-release/Bug Fix-8212e8e4-f65f-4594-a04f-76d47c61b41e.json b/packages/amazonq/.changes/next-release/Bug Fix-8212e8e4-f65f-4594-a04f-76d47c61b41e.json new file mode 100644 index 00000000000..4ce7a420280 --- /dev/null +++ b/packages/amazonq/.changes/next-release/Bug Fix-8212e8e4-f65f-4594-a04f-76d47c61b41e.json @@ -0,0 +1,4 @@ +{ + "type": "Bug Fix", + "description": "For security reasons, disabled auto linkify for link texts coming in markdown other than [TEXT](URL) format" +} diff --git a/packages/core/package.json b/packages/core/package.json index 7eca4863a77..a15a1fc8893 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -508,7 +508,7 @@ "@aws-sdk/property-provider": "3.46.0", "@aws-sdk/smithy-client": "^3.46.0", "@aws-sdk/util-arn-parser": "^3.46.0", - "@aws/mynah-ui": "^4.21.5", + "@aws/mynah-ui": "^4.21.6", "@gerhobbelt/gitignore-parser": "^0.2.0-9", "@iarna/toml": "^2.2.5", "@smithy/middleware-retry": "^2.3.1",