Joe Li f2d05d10ff fix(embedded-e2e): use route allowlist in static test server ...

The test app server only ever serves /, /index.html, and /sdk/index.js,
so replace dynamic path joining with a fixed allowlist. This eliminates
the data flow from req.url to readFileSync that CodeQL flagged as a
path-traversal sink — the previous resolve+startsWith containment check
was correct but not recognized as a sanitizer by the analyzer.

2026-04-30 19:27:59 -07:00

..

components

fix(playwright): remove Google Sheets dependency from dataset tests (#39143)

2026-04-30 06:18:50 -07:00

embedded-app

feat(embedded-e2e): add Playwright E2E tests for embedded dashboards

2026-04-30 19:27:33 -07:00

generators

feat(playwright): add documentation screenshot generator (#37494)

2026-01-29 10:14:53 -08:00

helpers

feat(embedded-e2e): add Playwright E2E tests for embedded dashboards

2026-04-30 19:27:33 -07:00

pages

feat(embedded-e2e): add Playwright E2E tests for embedded dashboards

2026-04-30 19:27:33 -07:00

tests

fix(embedded-e2e): use route allowlist in static test server

2026-04-30 19:27:59 -07:00

utils

feat(embedded-e2e): add Playwright E2E tests for embedded dashboards

2026-04-30 19:27:33 -07:00

global-setup.ts

test(playwright): convert and create new dataset list playwright tests (#36196)

2025-12-16 11:07:11 -08:00