4 people f967e6017b fix(report): prevent code-fence breakout in vulnerability markdown (#817) ...

* fix(report): prevent code-fence breakout in vulnerability markdown

render_vulnerability_md wrapped LLM-authored poc_script_code and code
snippet values in a fixed three-backtick fence, so a triple-backtick inside
the value closed the fence early and the rest rendered as live markdown
(headings, tracking-beacon images) in the shareable report deliverable.

Open each such block with a fence one backtick longer than the longest
backtick run in the payload (CommonMark: a block closes only on a fence at
least as long as the opener), so the content always renders verbatim. The
adjacent ```diff block is already safe (its lines are '- '/'+ ' prefixed and
so can never be a bare-backtick closing fence) and is left unchanged.

Fixes #815

* fix(report): indent multiline snippets

---------

Co-authored-by: thejesh23 <thejesh23@users.noreply.github.com>
Co-authored-by: Alex Schapiro <bearsyankees@gmail.com>

2026-07-20 22:07:44 -04:00

..

__init__.py

Add configurable token / cost usage limits (#576)

2026-06-22 11:17:08 -04:00

test_agent_factory_shell.py

Default sandbox exec commands to Bash (#764)

2026-07-14 03:44:05 -07:00

test_agent_tool_registration.py

Allow scan agent tool registration (#733)

2026-07-11 23:58:51 -04:00

test_cli_target_list.py

Add target list CLI option (#711)

2026-07-06 23:33:08 -04:00

test_config_loader.py

feat(settings): add force_required_tool_choice to LlmSettings (#730)

2026-07-10 18:36:33 -04:00

test_cost_tracking.py

fix(report): restore cost tracking for OpenRouter and other LiteLLM-routed models (#801)

2026-07-17 13:38:23 -07:00

test_docker_client_delete.py

fix(runtime): swallow torn-down docker socket in sandbox delete() (#721)

2026-07-10 00:13:35 -04:00

test_execution.py

Add configurable token / cost usage limits (#576)

2026-06-22 11:17:08 -04:00

test_hooks.py

Add configurable token / cost usage limits (#576)

2026-06-22 11:17:08 -04:00

test_inputs.py

chore(llm): shorten timeout helper docstring; update tests

2026-07-17 19:45:32 -07:00

test_local_dir_staging.py

fix(runtime): stage symlink-safe copies for LocalDir uploads (#766)

2026-07-14 17:40:23 -04:00

test_local_sources.py

Add target list CLI option (#711)

2026-07-06 23:33:08 -04:00

test_model_retry.py

fix(llm): add per-turn model request timeout so stalled streams fail fast and retry

2026-07-17 18:40:23 -07:00

test_models.py

fix(llm): use a JSON-serializable per-turn model timeout

2026-07-17 19:45:32 -07:00

test_notes.py

fix: avoid note ID collisions (#630)

2026-07-02 22:54:44 -04:00

test_optional_deps.py

fix(providers): declare bedrock + vertex extras and add provider import-error hints (#588)

2026-07-07 10:24:49 -04:00

test_provider_hints.py

fix(providers): match google submodule imports and walk full exception chain

2026-07-10 07:21:47 -07:00

test_proxy_client.py

strip transfer encoding (#820)

2026-07-20 21:56:34 -04:00

test_proxy_renderer.py

fix(tui): show 'more content available' for view_request over 15 lines (#687)

2026-07-06 03:50:02 -07:00

test_report_writer.py

fix(report): prevent code-fence breakout in vulnerability markdown (#817)

2026-07-20 22:07:44 -04:00

test_reporting_fields.py

fix(reporting): require advisory_cvss for dependency findings + add SCA TUI renderer (#753)

2026-07-12 17:31:49 -07:00

test_runner_rate_limit.py

fix(llm): add per-turn model request timeout so stalled streams fail fast and retry

2026-07-17 18:40:23 -07:00

test_runner_root_prompt.py

fix(llm): add per-turn model request timeout so stalled streams fail fast and retry

2026-07-17 18:40:23 -07:00

test_sarif_stride.py

feat(report): tag SARIF rules with STRIDE legs derived from CWE (#708)

2026-07-06 21:19:53 -04:00

test_sarif.py

feat(report): SARIF 2.1.0 emitter for CI / code-scanning integration (#626)

2026-07-03 10:43:31 -04:00

test_session_entries.py

fix(runtime): stage symlink-safe copies for LocalDir uploads (#766)

2026-07-14 17:40:23 -04:00

test_skill_dir_extension.py

Add skill directory registration (#746)

2026-07-12 12:05:58 -04:00

test_state_repo_context.py

fix(report): omit SARIF provenance for multiple repos (#726)

2026-07-10 09:41:18 -04:00