Skip to content

server islands - encrypted slots#14772

Merged
matthewp merged 6 commits intomainfrom
encoded-slots
Nov 15, 2025
Merged

server islands - encrypted slots#14772
matthewp merged 6 commits intomainfrom
encoded-slots

Conversation

@matthewp
Copy link
Copy Markdown
Contributor

Changes

  • Encrypts slots to prevent a malicious request that includes XSS. Same protection we have for props is applied by using the key to encrypt the slots so that we only accept them.

Testing

  • Tests added

Docs

N/A, bug fix.

matthewp and others added 2 commits November 14, 2025 14:57
Encrypt slots client-side and decrypt server-side to prevent injection attacks, matching the security model used for props.
Co-authored-by: Emanuele Stoppa <my.burning@gmail.com>
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Nov 15, 2025

🦋 Changeset detected

Latest commit: 2741162

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions github-actions Bot added the pkg: astro Related to the core `astro` package (scope) label Nov 15, 2025
@codspeed-hq
Copy link
Copy Markdown

codspeed-hq Bot commented Nov 15, 2025

CodSpeed Performance Report

Merging #14772 will not alter performance

Comparing encoded-slots (2741162) with main (03fb47c)1

Summary

✅ 6 untouched

Footnotes

  1. No successful run was found on main (ebc4b1c) during the generation of this report, so 03fb47c was used instead as the comparison base. There might be some changes unrelated to this pull request in this report.

@matthewp matthewp changed the title sever islands - encrypted slots server islands - encrypted slots Nov 15, 2025
@matthewp matthewp merged commit 00c579a into main Nov 15, 2025
26 checks passed
@matthewp matthewp deleted the encoded-slots branch November 15, 2025 14:10
@astrobot-houston astrobot-houston mentioned this pull request Nov 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pkg: astro Related to the core `astro` package (scope)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant