Waleed 48752c6024 fix(media-embed): remove ReDoS-prone regexes in host-gated providers (#5305) ...

* fix(media-embed): remove ReDoS-prone regexes in host-gated providers

Replace the unbounded '.*' patterns flagged by CodeQL (js/polynomial-redos) in
the YouTube, Facebook, and Giphy branches with bounded extraction off the parsed
URL (pathname / searchParams). Eliminates the O(n^2) backtracking a crafted
valid-host URL could trigger, with no change to matched links.

* test(media-embed): lock youtu.be trailing-slash + edge parity

Use the first path segment for youtu.be ids so a trailing slash still resolves
(matching the previous regex), and cover extra-query-param, si-param, embed-query,
and short-id cases.

* fix(media-embed): dispatch YouTube id by path shape; drop inline comments

- Resolve id from the /embed/ path segment before the ?v= query param so a valid
  embed URL with a spurious v param still embeds (was returning null)
- Remove non-TSDoc inline comments from the module and its test

2026-06-30 18:13:47 -07:00

..

src

fix(media-embed): remove ReDoS-prone regexes in host-gated providers (#5305)

2026-06-30 18:13:47 -07:00

package.json

feat(rich-markdown-editor): live media embeds + shared embed detection util (#5290)

2026-06-30 11:27:42 -07:00

tsconfig.json

improvement(codebase): centralize test mocks, extract @sim/utils, remove dead code (#4228)

2026-04-18 14:39:03 -07:00

vitest.config.ts

improvement(codebase): centralize test mocks, extract @sim/utils, remove dead code (#4228)

2026-04-18 14:39:03 -07:00