Skip to content

fix: dead external links in tenant configs - #128

Merged
ralyodio merged 1 commit into
masterfrom
fix/dead-external-links
Oct 17, 2026
Merged

ralyodio merged 1 commit into
masterfrom
fix/dead-external-links

Conversation

@ralyodio

Copy link
Copy Markdown
Collaborator

ThreatCrush Link Watch: removes dead mastodon link, fixes a typo'd image URL, drops nonexistent demo socials. x.com/tronbrowser (guessed from ?dn=), my-band.io/killer-startup.io example domains and the Spotify placeholder are intentional demo params and left alone.

🤖 Generated with Claude Code

- moshcode.sh: remove dead mastodon.social/@profullstack link (410), fix
  '_thum     b.png' typo in an image URL
- killer-startup.io demo: remove website/github socials that do not exist

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

19 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 13 | LOW: 4

Severity Rule Location
HIGH sh-remote-script-execution public/install.sh:302
HIGH sh-remote-script-execution public/install.sh:305
MEDIUM js-open-redirect app/dashboard/[[...tab]]/page.tsx:67
MEDIUM js-open-redirect app/signup/page.tsx:38
MEDIUM js-open-redirect components/PitSearch.tsx:118
MEDIUM js-unescaped-html-sink components/Tenant.tsx:29
MEDIUM js-unescaped-html-sink components/Tenant.tsx:30
MEDIUM js-unescaped-html-sink components/Tenant.tsx:73
MEDIUM js-unescaped-html-sink components/Tenant.tsx:147
MEDIUM sql-template-interpolation lib/db.ts:1117
MEDIUM sql-template-interpolation lib/db.ts:1147
MEDIUM redos-nested-quantifier lib/markdown.ts:109
MEDIUM sh-remote-script-execution public/install.sh:123
MEDIUM sh-remote-script-execution public/install.sh:127
MEDIUM sh-remote-script-execution public/install.sh:146
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:18
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:25
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:30
LOW secret-generic-credential tests/project-webhook-management.test.mjs:53

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 233a566 into master Oct 17, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant