mateaix 83660893a6 fix(chat): restrict generated-file link regex to http(s)/relative URLs ... Follow-up to #447. The generated-file link extraction accepted any non-')' text before the path, so a paren-free javascript:/data: URL embedding /api/v1/files/generated/<id> could be captured and bound to an <a href>, enabling XSS on click. Adopt the scheme-restricted pattern already used by SegmentSupersedeDetector and the channel adapters, on both backend (ChatController) and frontend (useChat). Also replace the inline fully-qualified Pattern/Matcher with imports and drop an unused run-overview i18n key. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-28 16:25:11 +08:00
..
locales	fix(chat): restrict generated-file link regex to http(s)/relative URLs	2026-06-28 16:25:11 +08:00
index.ts	fix(ui/workflows): keep property panel rendering when an i18n message contains Pebble braces	2026-05-13 20:15:12 +08:00