Waleed 04432b64a8 fix(copilot): validate credential-link URL scheme before rendering (#5416) ...

* fix(copilot): validate credential-link URL scheme before rendering

Only render the credential connect link as a clickable anchor when its
value resolves to an http(s) URL, reusing the isSafeHttpUrl helper
already used for chat file links.

* refactor(copilot): move isSafeHttpUrl to shared lib/core/utils/urls

Per Greptile's convention feedback: isSafeHttpUrl was consumed by both
chat and workspace/home but defined inside a feature-specific 'use client'
component. Move it alongside getBrowserOrigin (which it already depends
on) in lib/core/utils/urls.ts, matching this repo's shared-utility rule.

2026-07-04 15:19:08 -07:00

..

docs

improvement(academy): set 2, pages for the new video wave (workflow embeds, 2K players, full sequencing) (#5382)

2026-07-02 18:35:59 -07:00

pii

feat(data-retention): granular PII redaction stages (input + block outputs) (#5272)

2026-07-01 21:47:02 -04:00

realtime

feat(db): resolve DATABASE_URL per role (DATABASE_URL_<ROLE> with fallback) (#5276)

2026-06-30 15:17:55 -04:00

sim

fix(copilot): validate credential-link URL scheme before rendering (#5416)

2026-07-04 15:19:08 -07:00