fix(security): approval surfaces show reordering and invisible characters as escapes - #1049

Merged

Juliusolsson05 merged 12 commits into

mainfrom

fix/bidi-approval-spoofing

Sep 20, 2026

Commits on Sep 20, 2026

fix(security): approval surfaces show reordering and invisible characters as escapes

Juliusolsson05
and
claude
committed
4aef1d9
fix(security): escape by Unicode's own invisibility rule, and on every authorisation surface

Juliusolsson05
and
claude
committed
27ae4b3
fix(approvals): close the six approval surfaces the re-review found still raw

Juliusolsson05
and
claude
committed
c8fd18d
fix(approvals): escape every remaining surface the user authorises from

Juliusolsson05
and
claude
committed
2a41e8b
Merge origin/main into fix/bidi-approval-spoofing
Juliusolsson05
committed
f2eb33b
fix(approvals): escape the skill review's remaining repository-authored text

Juliusolsson05
and
claude
committed
42cb518
Merge origin/main into fix/bidi-approval-spoofing
Juliusolsson05
committed
f640289
fix(approvals): escape the conventions target path shown beside Replace

Juliusolsson05
and
claude
committed
3567524
fix(approvals): escape key-vault names and skill deployment paths

Juliusolsson05
and
claude
committed
bd62a43
fix(approvals): close the ten surfaces the systematic sweep enumerated

Juliusolsson05
and
claude
committed
3ed6fb1
fix(approvals): close the five partial findings, and prompt for a tier-0 install

Juliusolsson05
and
claude
committed
d34a395
fix(extensions): update a GitHub extension through the ledger, not the install box

Juliusolsson05
and
claude
committed
e469e6e