4grayandClaude Opus 5.5 5500cc8dbb fix(sources): linear URL-cleaning patterns; keep the stripper off the startup path ...

PR #1932 CI:

- CodeQL (polynomial regular expression on uncontrolled data): the
  embedded-URL and keyed-pair patterns in stripUrlCredentials could retry
  from every position of a long run of letters. Matches now start only
  where a name can start (lookbehinds) and every name part is bounded, as
  is the bare-userinfo pattern; a spec times 50,000-character runs. The
  preceding "wip: linear URL-cleaning regexes" commit holds that change.
- Initial bytes ratchet (+135 B over after master's #1928 lowered the
  baseline): stripUrlCredentials sat behind the shared logging barrel,
  which startup code imports, so esbuild placed it in an initial chunk
  although only the lazy Sources page and switcher use it. It now lives
  beside its only consumer in playlist/shared/util source-display, and the
  logging barrel exports the two redaction helpers it needs. Measured
  locally on the merge with master: 1,537,497 bytes, within 1,538,700.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 21:58:14 +02:00

..

src

fix(sources): linear URL-cleaning patterns; keep the stripper off the startup path

2026-10-13 21:58:14 +02:00

jest.config.ts

feat: add Jest configuration and tests for playlist shared utility

2026-04-04 20:41:07 +02:00

project.json

refactor(playlists): move refresh action to ui boundary

2026-05-22 11:27:04 +03:00

tsconfig.json

chore(deps): upgrade Angular to 22.1 and Nx to 23.2 (#1603)

2026-09-14 19:02:40 +02:00

tsconfig.lib.json

refactor: update nx monorepo structure

2026-03-09 23:24:34 +01:00

tsconfig.spec.json

ci(test): type-check Jest spec programs and gate it in CI (#1705)

2026-09-27 20:54:27 +02:00