Security context

Highlights

Code Execution: 1 prior fix. Scrutinize any change in this area.

src/modules/aifn/react/react.ts: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

Code Execution: Arbitrary JavaScript execution was possible through the 'calculate' action due to the direct use of eval(). This presents an immediate risk of system compromise if user-controlled strings reach the evaluation context. Any future implementation of client-side math or logic parsing must use sandboxed, non-evaluating parsers.

SSRF: Weak hostname validation using simple substring checks allowed attackers to bypass host restriction controls. This could allow DNS spoofing or proxying unauthorized requests through the Anthropic integration endpoints, necessitating strict exact/suffix hostname matching helpers.

Cross-Origin Resource Sharing (CORS) Bypass: Unsafe particle transforms during direct client-side chat generation could bypass CORS policies, allowing unauthorized origins to read or manipulate sensitive response data. Solid sanitization and stripping of unsafe transforms are required on all direct generation dispatch paths.