Kjell Tore Guttormsen b95d85bb4c feat(post-mcp-verify): E4 — scan markdown link titles for injection ... Adversarial payloads in markdown link title attributes (rendered as tooltips, parsed by agents) bypassed the existing HTML-content checks which gated on `<tag>` presence. Pattern: [text](url "title"). Adds linkTitleRegex extraction to the HTML-content block, runs each captured title through scanForInjection, emits at the strongest tier encountered with category markdown-link-title-injection. +3 tests (62 → 62 in post-mcp-verify.test.mjs file, was 59). Refs: Batch B Wave 4 / Step 9 / v7.2.0		2026-04-29 14:52:30 +02:00
..
fixtures	fix(memory-poisoning): E15 — add .claude/agents/*.md to target glob	2026-04-29 14:13:01 +02:00
helpers	test(llm-security): add JetBrains fixture tree + build helper	2026-04-18 10:49:49 +02:00
hooks	feat(post-mcp-verify): E4 — scan markdown link titles for injection	2026-04-29 14:52:30 +02:00
lib	feat(injection): E16 — homoglyph NFKC fold before every pattern match	2026-04-29 14:22:05 +02:00
scanners	fix(memory-poisoning): E15 — add .claude/agents/*.md to target glob	2026-04-29 14:13:01 +02:00