Repository navigation

Harden reward JavaScript placeholder evaluation - #293

Closed

BenCodez wants to merge 54 commits into

masterfrom

security/javascript-placeholder-hardening

Closed

Harden reward JavaScript placeholder evaluation#293
BenCodez wants to merge 54 commits into
masterfrom
security/javascript-placeholder-hardening

Commits on Aug 24, 2026
- Harden JavaScript placeholder evaluation
  BenCodez
  committed
  db94ad7
- Add safe JavaScript placeholder parser
  BenCodez
  committed
  813107c
- Bind placeholders before JavaScript requirements
  BenCodez
  committed
  8bb99ba
- Bind placeholders before reward JavaScript execution
  BenCodez
  committed
  1fcc831
- Add JavaScript placeholder injection regression tests
  BenCodez
  committed
  e65f1e8
- Prevent placeholder values from creating JavaScript blocks
  BenCodez
  committed
  b473c30
- Test JavaScript marker neutralization in placeholder values
  BenCodez
  committed
  682163e
- Preserve JavaScript behavior with mocked engines
  BenCodez
  committed
  84c8461
- Preserve reward JavaScript behavior with mocked engines
  BenCodez
  committed
  d7e86bd
- Fix literal JavaScript marker neutralization
  BenCodez
  committed
  2be840b
- Handle template expressions and primitive placeholder values
  BenCodez
  committed
  7b67276
- Preserve brace placeholder compatibility
  BenCodez
  committed
  3759d0f
- Add parser regression coverage from review feedback
  BenCodez
  committed
  519f894
- Fix JavaScript placeholder resolver block
  BenCodez
  committed
  6c1d32c
- Fix template expression placeholder matching
  BenCodez
  committed
  abe43c0
- Handle comments and nested templates safely
  BenCodez
  committed
  81d6809
- Test comment and nested template placeholder contexts
  BenCodez
  committed
  4373528
- Handle regex literals in JavaScript placeholder parsing
  BenCodez
  committed
  ae72815
- Test regex literal placeholder hardening
  BenCodez
  committed
  123177f
- Preserve placeholder values inside regex literals
  BenCodez
  committed
  7fdc9fe
- Test placeholders inside regex literals
  BenCodez
  committed
  d3487a9
- Recognize regex literals after control heads and keywords
  BenCodez
  committed
  167da68
- Test regex detection after control heads and keywords
  BenCodez
  committed
  26505fd
- Recognize regex literals after statement blocks
  BenCodez
  committed
  58fa7b0
- Test regex statements after blocks
  BenCodez
  committed
  3c0533d
Commits on Aug 25, 2026
- Distinguish postfix operators before regex detection
  BenCodez
  committed
  215802e
- Test postfix division placeholder context
  BenCodez
  committed
  84730f1
- Test full-pass JavaScript marker neutralization
  BenCodez
  committed
  3046dc0
- Neutralize JavaScript markers after placeholder substitution
  BenCodez
  committed
  0f44375
- Apply full-pass placeholder marker hardening
  BenCodez
  committed
  dedc29b
- Neutralize JavaScript markers after placeholder substitution
  github-actions[bot]
  committed
  5fee0e8
- Test full-pass JavaScript marker neutralization
  BenCodez
  committed
  de082a5
- Apply Codex lexical fixes for PR 293
  BenCodez
  committed
  7061974
- Harden JavaScript lexical control tracking
  github-actions[bot]
  committed
  8285217
- Test authored marker preservation with empty placeholders
  BenCodez
  committed
  2d45d17
- Apply Codex block-state fixes for PR 293
  BenCodez
  committed
  ba40d32
- Track statement blocks during JavaScript lexing
  BenCodez
  committed
  d5f96cb
- Test lexical statement block detection
  BenCodez
  committed
  de7ddf8
- Remove temporary Codex patch workflow
  BenCodez
  committed
  b457a19
- Isolate statement block regression resolver
  BenCodez
  committed
  7128d79
- Encode map values passed through JavaScript markers
  BenCodez
  committed
  fb81b86
- Treat labeled JavaScript blocks as statement context
  BenCodez
  committed
  b60eb42
- Add focused Codex 293 patch workflow
  BenCodez
  committed
  457ebb5
- Keep map placeholder values out of JavaScript source
  BenCodez
  committed
  a4bbbc9
- Test map values inside JavaScript markers stay data
  BenCodez
  committed
  d733b0c
- Test labeled blocks and encoded JavaScript values
  BenCodez
  committed
  88f4090
- Remove obsolete Codex 293 patch workflow
  BenCodez
  committed
  ddd05e2
- Apply Codex function-expression lexer fix
  BenCodez
  committed
  84fe248
- Distinguish function expression bodies from statement blocks
  github-actions[bot]
  committed
  42d7392
- Test additional function expression block contexts
  BenCodez
  committed
  17fc31b
- Apply latest Codex lexer fixes
  BenCodez
  committed
  30bee81
- Harden JavaScript lexer keyword and class contexts
  BenCodez
  committed
  a732494
- Test latest JavaScript lexer edge cases
  BenCodez
  committed
  b3c1d41
- Fix qualified-member regression resolver
  BenCodez
  committed
  1abf4d5

Commits

Commits on Aug 24, 2026

Commits on Aug 25, 2026