Skip to content

fix(security): validate URL scheme before shell.openExternal (MCP-app sandbox escape)#3416

Merged
tatoalo merged 3 commits into
PostHog:mainfrom
zachdotai:fix/validate-external-url-scheme
Jul 15, 2026
Merged

fix(security): validate URL scheme before shell.openExternal (MCP-app sandbox escape)#3416
tatoalo merged 3 commits into
PostHog:mainfrom
zachdotai:fix/validate-external-url-scheme