PR to anthropics/skills escapes closing script tags in embedded JSON to fix injection risk
iamLoukik · ghdev · 2026-10-16
A community PR (#2032) against anthropics/skills fixes a script-injection hazard in generatereview.py.
When serialized embedded data contains a literal </script>, browsers interpret it as the end of the inline script element, potentially breaking the generated standalone HTML page and enabling script injection. The fix replaces < with the JSON escape sequence \u003c before embedding.
The author manually verified with a payload of </script><script>window.pwned=1</script> that the output contains no literal closing-script tag; the full test suite has not been run.
More from coding & agent
- Index Network open-sources Social Discovery Protocol: agents negotiate fit on your behalf — carsonfarmer · 2026-10-23
- Installed a formal-verification skill: it silently installed Java, MacBook runs 10 degrees hotter — zealcaiden · 2026-10-23
- OpenAI's Decisions API hits GA: near real-time routing up to 10x faster than GPT-6 Luna — OpenAIDevs · 2026-10-23
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Proof of Agent: paste one prompt and your AI mines, grades, and self-governs — adamamcbride · 2026-10-23
- DeepLearning.AI weekly: GPT-6.1 hits 97.9% byte parity on COBOL migration — DeepLearningAI · 2026-10-23