Kjell Tore Guttormsen b95d85bb4c feat(post-mcp-verify): E4 — scan markdown link titles for injection ... Adversarial payloads in markdown link title attributes (rendered as tooltips, parsed by agents) bypassed the existing HTML-content checks which gated on `<tag>` presence. Pattern: [text](url "title"). Adds linkTitleRegex extraction to the HTML-content block, runs each captured title through scanForInjection, emits at the strongest tier encountered with category markdown-link-title-injection. +3 tests (62 → 62 in post-mcp-verify.test.mjs file, was 59). Refs: Batch B Wave 4 / Step 9 / v7.2.0		2026-04-29 14:52:30 +02:00
..
post-mcp-verify.mjs	feat(post-mcp-verify): E4 — scan markdown link titles for injection	2026-04-29 14:52:30 +02:00
post-session-guard.mjs	feat(post-session-guard): E17 — configurable escalation window + 20-call MEDIUM advisory	2026-04-29 14:26:18 +02:00
pre-bash-destructive.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-compact-scan.mjs	test(hooks): cover pre-compact-scan happy-path, modes, size-cap	2026-04-17 14:44:52 +02:00
pre-edit-secrets.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-install-supply-chain.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-prompt-inject-scan.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-write-pathguard.mjs	fix(llm-security): B1 pathguard regex — match multi-segment .env.*.*	2026-04-19 23:59:38 +02:00
update-check.mjs	feat: initial open marketplace with llm-security, config-audit, ultraplan-local	2026-04-06 18:47:49 +02:00