🛡️ Sentinel: [CRITICAL] Fix XSS vulnerability in embed prompt

[billlzzz10]

🚨 Severity: CRITICAL
💡 Vulnerability: The dangerouslySetInnerHTML React prop was being used to format dynamic text by converting mentions to HTML tags in the embed UI. User input was minimally escaped, leading to XSS if malicious scripts or mismatched tags were entered.
🎯 Impact: A malicious user could craft a prompt payload that would execute arbitrary JavaScript in the context of any user viewing the embed.
🔧 Fix: Removed dangerouslySetInnerHTML completely. Instead, the highlightMentions function now parses the string into segments using a capturing regex (text.split(/(@\w+)/g)) and maps those segments into an array of React nodes (e.g., <span className="mention">...</span>). This leverages React's built-in, highly robust escaping for standard text nodes. Added finding to .jules/sentinel.md.
✅ Verification: Ran pnpm test, pnpm lint, and pnpm format. All pass. Looked at the diff to ensure the fix correctly splits the mentions array.

---

PR created automatically by Jules for task 18444249714437050523 started by @billlzzz10

---

Summary by cubic

Fixes a critical XSS in the embed prompt by removing dangerouslySetInnerHTML and rendering mentions as React nodes. Prevents arbitrary script execution when viewing the embed.

• Bug Fixes
  • Implemented highlightMentions that splits on (@\w+) and returns <span className="mention"> nodes.
  • Replaced the embed <p>’s dangerouslySetInnerHTML with safe React children.
  • Removed the custom escapeHtml utility and documented the fix in .jules/sentinel.md.

^{Written for commit 73eb1b9. Summary will update on new commits.}

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
agent-library	Error		Jul 16, 2026 11:47pm

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 474d63f7-9277-4981-9118-d865619b1f74

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch sentinel/fix-xss-embed-18444249714437050523

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}