# fix\(update\): sanitize cli update release url and action button \(\#415\) · lucenx/codexbar-plasma

[View on GitCafe](https://git.cafe/lucenx/codexbar-plasma/commit/ad6c227badff269d16fc93145da1c0f5f16854e9)

Repository: [lucenx/codexbar-plasma](https://git.cafe/lucenx/codexbar-plasma)

Visibility: public

Requested revision: ad6c227badff269d16fc93145da1c0f5f16854e9

Requested commit: ad6c227badff269d16fc93145da1c0f5f16854e9

Commit: ad6c227badff269d16fc93145da1c0f5f16854e9

Tree: 103fcabb7fbb13aa63095c67777025f87e6f1631

Author: Simone

Committer: GitHub

## Message

```
fix(update): sanitize cli update release url and action button (#415)

Validate upstream CLI update release URLs with safeReleaseUrl and only provide the notification action button when a valid, bounded GitHub URL is present. Regression tests verify that untrusted and empty URLs stay non-actionable and are excluded from pendingUpdateReleaseUrls.
```

## Parents

- [93280b2e11126aef037f5bbd8dacac0302c72c09](https://git.cafe/lucenx/codexbar-plasma/commit/93280b2e11126aef037f5bbd8dacac0302c72c09?format=markdown)

[Source at this commit](https://git.cafe/lucenx/codexbar-plasma/tree/ad6c227badff269d16fc93145da1c0f5f16854e9?format=markdown)