From 3862ac13a2d180a634b4a70a9475a982a68aff50 Mon Sep 17 00:00:00 2001 From: Prathamesh Penshanwar <128643250+PRATHAM777P@users.noreply.github.com> Date: Mon, 27 Apr 2026 23:55:12 +0530 Subject: [PATCH] Potential fix for code scanning alert no. 12: Incomplete multi-character sanitization Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- src/tools/fetch/web-fetch-utils.ts | 2 -- 1 file changed, 2 deletions(-) diff --git a/src/tools/fetch/web-fetch-utils.ts b/src/tools/fetch/web-fetch-utils.ts index 4a5b8e7..feb249c 100644 --- a/src/tools/fetch/web-fetch-utils.ts +++ b/src/tools/fetch/web-fetch-utils.ts @@ -5,8 +5,6 @@ function decodeEntities(value: string): string { .replace(/ /gi, " ") .replace(/"/gi, '"') .replace(/'/gi, "'") - .replace(/</gi, "<") - .replace(/>/gi, ">") .replace(/&#x([0-9a-f]+);/gi, (_, hex) => String.fromCharCode(Number.parseInt(hex, 16))) .replace(/&#(\d+);/gi, (_, dec) => String.fromCharCode(Number.parseInt(dec, 10))) .replace(/&/gi, "&");