claude-code-best/packages
James Feng 69224beb0d fix: resolve 4 dismissed CodeQL alerts — URL sanitization + crypto bias
- bingAdapter.ts: fix .hostname.includes('bing.com') → endsWith('.bing.com')
  to prevent evilbing.com bypass (#367, incomplete-url-substring-sanitization)
- Task.ts, LocalMainSessionTask.ts, words.ts: replace modulo bias
  (bytes[i] % length) with rejection sampling using crypto.randomBytes,
  eliminating biased-cryptographic-random alerts (#5, #6, #7)

Validation: bun run check:fix ✓, bunx tsc --noEmit (0 new errors) ✓,
bun run build ✓
2026-06-08 10:23:32 +08:00
..
@ant fix: resolve 17 CodeQL alerts — log injection, command injection, ReDoS 2026-06-08 10:10:29 +08:00
acp-link fix(tsc): Phase 3d — fix 40 type errors across 15 files (87→47) 2026-06-07 11:19:48 +08:00
agent-tools feat: pull in Vite build system + complete packages/builtin-tools/ 2026-06-01 18:18:03 +08:00
audio-capture-napi feat: enable /voice mode with native audio binaries 2026-04-03 21:14:44 +08:00
builtin-tools fix: resolve 4 dismissed CodeQL alerts — URL sanitization + crypto bias 2026-06-08 10:23:32 +08:00
color-diff-napi fix: highlight 缓存改用 LRUCache 降低内存开销 2026-06-04 12:37:11 +08:00
image-processor-napi feat: 实现 4 个 NAPI 包 — modifiers/image-processor/audio-capture/url-handler 2026-04-01 01:07:42 +08:00
mcp-client feat: pull in Vite build system + complete packages/builtin-tools/ 2026-06-01 18:18:03 +08:00
modifiers-napi feat: 完成最新的可构建版本 2026-04-01 10:42:53 +08:00
remote-control-server fix: resolve 17 CodeQL alerts — log injection, command injection, ReDoS 2026-06-08 10:10:29 +08:00
url-handler-napi feat: 实现 4 个 NAPI 包 — modifiers/image-processor/audio-capture/url-handler 2026-04-01 01:07:42 +08:00
weixin feat: pull in Vite build system + complete packages/builtin-tools/ 2026-06-01 18:18:03 +08:00
tsconfig.json feat: merge 4 upstream improvements (effort + sideQuery routing + agent hints + plan/paste fixes) 2026-06-02 02:29:54 +08:00