Prevent GitHub GraphQL query injection by Andarist · Pull Request #2304 · changesets/changesets · GitHub
Skip to content

Prevent GitHub GraphQL query injection - #2304

Open
Andarist wants to merge 1 commit into
mainfrom
fix-github-graphql-injection
Open

Andarist wants to merge 1 commit into
mainfrom
fix-github-graphql-injection

Conversation

@Andarist

Copy link
Copy Markdown
Member

No description provided.

@changeset-bot

changeset-bot Bot commented Sep 16, 2026

Copy link
Copy Markdown

@netlify

netlify Bot commented Sep 16, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for changesets ready!

Name Link
🔨 Latest commit 4f922ad
🔍 Latest deploy log https://app.netlify.com/projects/changesets/deploys/6aaa67933e8b3f0008b6f34b
😎 Deploy Preview https://deploy-preview-2304--changesets.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@codecov

codecov Bot commented Sep 16, 2026

Copy link
Copy Markdown

@Andarist
Andarist marked this pull request as ready for review September 16, 2026 10:01
@Andarist
Andarist requested review from beeequeue and bluwy September 16, 2026 10:01

@beeequeue beeequeue left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i assume this happened because we don't use proper arguments?

could we do that instead of doing brittle-ish sanitizing?

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants