[PR #769] [MERGED] fix: security audit findings from issue #741 (#757) #832

New issue

Closed

opened 2026-05-06 13:10:22 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 13:10:22 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/cloudflare/vinext/pull/769
Author: @james-elicx
Created: 4/3/2026
Status: ✅ Merged
Merged: 4/3/2026
Merged by: @james-elicx

Base: main ← Head: fix/security-audit-741

📝 Commits (3)

91adcaf fix: security audit findings from issue #741
a40505f fix: address bonk review comments
2d3ba10 fix: address bonk review comments on PR #769

📊 Changes

10 files changed (+134 additions, -10 deletions)

View changed files

📝 .github/workflows/nextjs-tracker.yml (+8 -3)
📝 .github/workflows/publish.yml (+3 -1)
📝 examples/hackernews/lib/get-comments.js (+5 -1)
📝 examples/hackernews/package.json (+2 -0)
📝 examples/hackernews/tsconfig.json (+10 -3)
📝 packages/vinext/src/shims/head.ts (+3 -1)
📝 packages/vinext/src/shims/script.tsx (+4 -0)
📝 pnpm-lock.yaml (+97 -0)
📝 pnpm-workspace.yaml (+1 -0)
📝 tests/vite-hmr-websocket.test.ts (+1 -1)

📄 Description

Closes #757 since I can't push to that fork.
Closes https://github.com/cloudflare/vinext/issues/741

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/cloudflare/vinext/pull/769 **Author:** [@james-elicx](https://github.com/james-elicx) **Created:** 4/3/2026 **Status:** ✅ Merged **Merged:** 4/3/2026 **Merged by:** [@james-elicx](https://github.com/james-elicx) **Base:** `main` ← **Head:** `fix/security-audit-741` --- ### 📝 Commits (3) - [`91adcaf`](https://github.com/cloudflare/vinext/commit/91adcafd7fbb3d62a42cf85af2bcdebe3a3c6e44) fix: security audit findings from issue #741 - [`a40505f`](https://github.com/cloudflare/vinext/commit/a40505f4cf2e63284089b1b1c9173305af5db8a3) fix: address bonk review comments - [`2d3ba10`](https://github.com/cloudflare/vinext/commit/2d3ba10d6f7f4f09ee77183e219acfb93ec7d341) fix: address bonk review comments on PR #769 ### 📊 Changes **10 files changed** (+134 additions, -10 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/nextjs-tracker.yml` (+8 -3) 📝 `.github/workflows/publish.yml` (+3 -1) 📝 `examples/hackernews/lib/get-comments.js` (+5 -1) 📝 `examples/hackernews/package.json` (+2 -0) 📝 `examples/hackernews/tsconfig.json` (+10 -3) 📝 `packages/vinext/src/shims/head.ts` (+3 -1) 📝 `packages/vinext/src/shims/script.tsx` (+4 -0) 📝 `pnpm-lock.yaml` (+97 -0) 📝 `pnpm-workspace.yaml` (+1 -0) 📝 `tests/vite-hmr-websocket.test.ts` (+1 -1) </details> ### 📄 Description Closes #757 since I can't push to that fork. Closes https://github.com/cloudflare/vinext/issues/741 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>